Category "xss"

Snyk False Positives for XSS in PHP

We've recently started using Snyk to perform code analysis, however have hit the stumbling block that the first scan is reporting many (>700) XSS vulnerabili

Module not found: Error: Can't resolve 'trusted-types' in '' angular

getting Module not found: Error: Can't resolve 'trusted-types' installed trusted types using this command npm i @types/trusted-types --force. and npm install t

Replace HTML code with code from another page

I have got two html files, say page1.html and page2.html. In both files I have an article element. Now, on page1.html I would like to replace the content of the

Apache Rewrite Condition for Query String

I think someone trying to put some load on my website or hack, which I would like to stop. If you see below url there is a text as "<svg/class="elliot"onLoad

XSS attack still works despite htmlspecialchars() doing its work

hi i am trying to filter outputs of users who will put free text and wanna prevent XSS attacks so i tried this function i made to check <?php $patterns = [

XSS - Javascript String

Is it possible to perform an XSS on the following: <script> var name = "USER_INPUT";</script> where USER_INPUT is given by the user. I have a fil

Why can't Mozilla observatory detect the http security headers on my website anymore?

A few months ago, I added security headers to all of the pages on my website. The Mozilla Observatory detected the changes then and the score increased to B+. T