Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
3
Newest
 Supporter
Impact
~1k people reached

  • 0 posts edited
  • 0 helpful flags
  • 1 vote cast
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
Sounds good. Before I was just stripping it, but now I'll use htmlspecialchars() to leave it as is
Apr
26
comment How does Facebook strip html/apostrophes for XSS but also display it?
What about something like htmlspecialchars()
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Angle brackets.
Apr
25
comment How does Facebook strip html/apostrophes for XSS but also display it?
Oh no; I am escaping it and sanitizing it now. It's just that websites like Facebook don't seem to be escaping anything [at least on the frontend], as I could write a HTML tag and it would still be displayed.
Oct
16
comment Resizing an image with a non-integral conversion factor
How might I generate those coordinates?