4 ms·
How does it prevent XSS?
by runeks 12y ago
How does it prevent XSS?
- QuixoticChris 12y ago2. XSS injection. Any html coming back from a form will be efficiently sanitized just once on arrival. Unsanitized strings will be sanitized before being displayed. http://www.yesodweb.com/page/about http://www.yesodweb.com/page/about I suspect this is accomplished through safe vs. unsafe types. Imagine the only function from `unsafe___` to `safe___` is the escape function, and all functions giving text back in responses is require to be of type `safe___`.