Category "xss"

Apache Rewrite Condition for Query String

I think someone trying to put some load on my website or hack, which I would like to stop. If you see below url there is a text as "<svg/class="elliot"onLoad

XSS attack still works despite htmlspecialchars() doing its work

hi i am trying to filter outputs of users who will put free text and wanna prevent XSS attacks so i tried this function i made to check <?php $patterns = [

XSS - Javascript String

Is it possible to perform an XSS on the following: <script> var name = "USER_INPUT";</script> where USER_INPUT is given by the user. I have a fil

Why can't Mozilla observatory detect the http security headers on my website anymore?

A few months ago, I added security headers to all of the pages on my website. The Mozilla Observatory detected the changes then and the score increased to B+. T