Re: [PHP] Re: Preventing Cross Site Scripting Vulnerbilities

[Marco Kaiser]

Hi,


IMO, the best way to avoid XSS is to filter _output_.
>
> My script:
> http://nengine.korsengineering.com/files/src/misc/HtmlFilter.phps
>

uhm,

1st. filter input
2nd escape output


--
Marco Kaiser