Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
3
Newest
 Teacher
Impact
~2k people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
May
4
comment Is stripping out < and > characters an effective way of preventing XSS?
"if somehow you are placing user input into something inside a <script> tag, there are a whole myriad of things you need to worry about." Really? I haven't worried too much about this: I always encode the string using a JSON encoding library. Something like Python's json.dumps(user_input) should suffice for this, shouldn't it? (Assuming that user_input is a string.)
Jan
24
awarded  Teacher
Jan
24
answered If email is insecure, why do we use it for password resets?
Jan
10
awarded  Supporter
Aug
9
awarded  Autobiographer