146 reputation
3
bio website
location United States
age
visits member for 2 years, 6 months
seen Apr 25 at 23:56

May
16
asked Storing escaped mysqli characters in database but outputting them correctly with htmlspecialchars()
Apr
26
awarded  Supporter
Apr
26
accepted How does Facebook strip html/apostrophes for XSS but also display it?
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
Sounds good. Before I was just stripping it, but now I'll use htmlspecialchars() to leave it as is
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
What about something like htmlspecialchars()
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Angle brackets.
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Oh no; I am escaping it and sanitizing it now. It's just that websites like Facebook don't seem to be escaping anything [at least on the frontend], as I could write a HTML tag and it would still be displayed.
Apr
24
asked How does Facebook strip html/apostrophes for XSS but also display it?
Apr
16
awarded  Scholar
Apr
16
accepted Resizing an image with a non-integral conversion factor
Oct
16
awarded  Student
Oct
16
comment Resizing an image with a non-integral conversion factor
How might I generate those coordinates?
Oct
16
asked Resizing an image with a non-integral conversion factor