wonko.com personal blog
There's more to HTML escaping than &, <, >, and "
This was exaggeration for effect—there aren’t many cases where a simple XSS injection could actually empty a bank account—but I wanted to make a point.
- Points
- 138
- HN comments
- 30
- Submissions
- 1
- Cited by
- 0 commenters
On Hacker News
| Submitted | Title on HN | Points | Comments |
|---|---|---|---|
| May 8, 2011 | There's more to HTML escaping than &, <, >, and " by jamesbritt | 138 | 30 |
