New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Escape / ? #128

Open

danielcompton opened this issue Feb 4, 2016 · 1 comment

danielcompton commented Feb 4, 2016

OWASP recommend escaping forward slashes as well. Would you be happy to take a PR for this?

https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content

Owner

weavejester commented Feb 6, 2016

Maybe... It doesn't make a very strong case for that recommendation, but on the other hand I don't see the harm in it, either.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment