Preventing cross-site scripting attacks
Tuesday, September 25, 2007 12:16:05 PM
For example, if your blog comment box allows users to write JavaScript snippets that aren't escaped in any way by the server and are ran, it's most likely vulnerable to an XSS attack.
It's not just a problem with small, less known sites - Recently, even Google had an XSS vulnerability.
XSS attacks are, however, quite easy to prevent if you know how.






