Tag Info

New answers tagged


Indeed, if a nefarious person succeeds to store an XSS within your database through one of your website's inputs that can be the most dangerous aspect of an XSS as far as I know since it can be transformed to something like Samy worm which is just an XSS worm. The best way to evaluate that still remains manually, however as your database entries grow by ...


You could use a scanner to guide you, but you need start with secure coding. Use a scanner to test for verification after you have implemented the secure coding concepts. First rule of secure coding is See input as evil. The first step to not trusting input in a web application is to encode (not filter) all user input. So, your input example will be HTML ...

Top 50 recent answers are included