Category "xss"

XSS attack still works despite htmlspecialchars() doing its work

hi i am trying to filter outputs of users who will put free text and wanna prevent XSS attacks so i tried this function i made to check <?php $patterns = [

XSS - Javascript String

Is it possible to perform an XSS on the following: <script> var name = "USER_INPUT";</script> where USER_INPUT is given by the user. I have a fil

Why can't Mozilla observatory detect the http security headers on my website anymore?

A few months ago, I added security headers to all of the pages on my website. The Mozilla Observatory detected the changes then and the score increased to B+. T