Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
3
Newest
 Supporter
Impact
~1k people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
May
16
asked Storing escaped mysqli characters in database but outputting them correctly with htmlspecialchars()
Apr
26
awarded  Supporter
Apr
26
accepted How does Facebook strip html/apostrophes for XSS but also display it?
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
Sounds good. Before I was just stripping it, but now I'll use htmlspecialchars() to leave it as is
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
What about something like htmlspecialchars()
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Angle brackets.
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Oh no; I am escaping it and sanitizing it now. It's just that websites like Facebook don't seem to be escaping anything [at least on the frontend], as I could write a HTML tag and it would still be displayed.
Apr
24
asked How does Facebook strip html/apostrophes for XSS but also display it?
Apr
16
awarded  Scholar
Apr
16
accepted Resizing an image with a non-integral conversion factor
Oct
16
awarded  Student
Oct
16
comment Resizing an image with a non-integral conversion factor
How might I generate those coordinates?
Oct
16
asked Resizing an image with a non-integral conversion factor