146 reputation
3
bio website
location United States
age
visits member for 2 years, 8 months
seen Apr 25 at 23:56

Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
Sounds good. Before I was just stripping it, but now I'll use htmlspecialchars() to leave it as is
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
What about something like htmlspecialchars()
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Angle brackets.
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Oh no; I am escaping it and sanitizing it now. It's just that websites like Facebook don't seem to be escaping anything [at least on the frontend], as I could write a HTML tag and it would still be displayed.
Oct
16
comment Resizing an image with a non-integral conversion factor
How might I generate those coordinates?