Skip to main content
edited body
Source Link
Awake Zoldiek
  • 209
  • 1
  • 4
  • 13
  • When having a rich text editor on a web application, what is the best way to espaceescape HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?
  • When having a rich text editor on a web application, what is the best way to espace HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?
  • When having a rich text editor on a web application, what is the best way to escape HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?
Tweeted twitter.com/#!/StackSecurity/status/427098997925634048
  • When having a rich text editor on a web application, what is the best way to espace HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?

Thank you in advance !

  • When having a rich text editor on a web application, what is the best way to espace HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?

Thank you in advance !

  • When having a rich text editor on a web application, what is the best way to espace HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?
Source Link
Awake Zoldiek
  • 209
  • 1
  • 4
  • 13

Escaping rich text editor output

  • When having a rich text editor on a web application, what is the best way to espace HTML entities and prevent XSS attacks but keep the formatting (<b>, <i>, <u>, ...etc.) ?

Thank you in advance !