XSS (Cross Site Scripting) Prevention Cheat Sheet

Nico Brünjes am 26.01.2009
in: javascript, php, programmierung

This article provides a simple positive model for preventing XSS using output escaping/encoding properly. While there are a huge number of XSS attack vectors, following a few simple rules can completely defend against this serious attack.