StackOverflow Questions for Tag: xss

New-Girl

Reputation: 19

Is it possible to user filter_input together with htmlspecialchars?

phphtmlcssmysqlxss

Score: 0

Answers: 1

Kumkuatte

Reputation: 23

Is XSS Dangerous For Frontend-Only Sites?

xss

Score: 0

Answers: 0

Venkaiah Yepuri

Reputation: 1651

Cross Site Scripting issue with window.location.search

javascriptxss

Score: 7

Answers: 3

Lek

Reputation: 137

Disabled Vue iframe security

javascriptreactjsiframevuejs2xss

Score: 0

Answers: 0

Tomer Lichtash

Reputation: 9262

How to pass parameters to a Script tag?

javascriptparameterswidgetxssscript-tag

Score: 145

Answers: 16

rahman

Reputation: 131

Receiving wrong output when using, e.g. &center

c#.netxssowasp

Score: 2

Answers: 1

Josh

Reputation: 1356

How to use ESAPI to resolve JavaScript DOM XSS?

javascriptajaxextjsxssesapi

Score: 2

Answers: 2

Narwhal

Reputation: 43

Is there a way to block <script> alert using Content-Security-Policy header but with unsafe-inline

htmlsecurityxsscontent-security-policy

Score: 0

Answers: 0

Gazale_m

Reputation: 41

Validating Text input with val()

jquerysecurityxssvalidating-event

Score: 0

Answers: 3

Haedaal

Reputation: 19

Using JWT stored in HTTPonly & secure cookie: Vulnerable to CSRF. but not to XSS?

securitycookiesxss

Score: 0

Answers: 1

Avogatro

Reputation: 11

How do I remove unsafe-inline from Content Security Policy and use server-send data to generate html elements, triggered by user interaction?

javascripthtmlxsscontent-security-policymeta-tags

Score: 1

Answers: 1

Medinoc

Reputation: 6608

Checkmarx says document.url is unsafe

javascriptxsscheckmarx

Score: 0

Answers: 2

Ags

Reputation: 95

DOMPurify for XSS

javascripthtmlurlxssdompurify

Score: 0

Answers: 1

sudoExclamationExclamation

Reputation: 8754

How to prevent Rust's Url::parse from auto-encoding and instead throw error?

validationparsingurlrustxss

Score: 0

Answers: 1

sudoExclamationExclamation

Reputation: 8754

How to correctly handle ampersand for the separator in query parameters of a user input URL while also being safe against XSS?

htmlformsvalidationrustxss

Score: 0

Answers: 1

customcommander

Reputation: 18961

Why is setInterval not safe from XSS?

javascriptsecurityxss

Score: 3

Answers: 1

Brent

Reputation: 23722

How can I sanitize user input with PHP?

phpsecurityxsssql-injectionuser-input

Score: 1286

Answers: 17

MDalt

Reputation: 1801

How to pass a variable with text and a link into a React element

reactjshyperlinkxss

Score: 2

Answers: 3

Dan Herbert

Reputation: 103517

Is it possible for a XSS attack to obtain HttpOnly cookies?

securitycookiesxss

Score: 28

Answers: 6

Georgios

Reputation: 1037

MSAL JWT Token in session/localStorage and Token Cookie

reactjsjwtcsrfxssmsal.js

Score: 0

Answers: 0

PreviousPage 1Next

StackOverflow Questions for Tag: xss

Is it possible to user filter_input together with htmlspecialchars?

Is XSS Dangerous For Frontend-Only Sites?

Cross Site Scripting issue with window.location.search

Disabled Vue iframe security

How to pass parameters to a Script tag?

Receiving wrong output when using, e.g. &amp;center

How to use ESAPI to resolve JavaScript DOM XSS?

Is there a way to block &lt;script&gt; alert using Content-Security-Policy header but with unsafe-inline

Validating Text input with val()

Using JWT stored in HTTPonly &amp; secure cookie: Vulnerable to CSRF. but not to XSS?

How do I remove unsafe-inline from Content Security Policy and use server-send data to generate html elements, triggered by user interaction?

Checkmarx says document.url is unsafe

DOMPurify for XSS

How to prevent Rust&#39;s Url::parse from auto-encoding and instead throw error?

How to correctly handle ampersand for the separator in query parameters of a user input URL while also being safe against XSS?

Why is setInterval not safe from XSS?

How can I sanitize user input with PHP?

How to pass a variable with text and a link into a React element

Is it possible for a XSS attack to obtain HttpOnly cookies?

MSAL JWT Token in session/localStorage and Token Cookie

Receiving wrong output when using, e.g. &center

Is there a way to block <script> alert using Content-Security-Policy header but with unsafe-inline

Using JWT stored in HTTPonly & secure cookie: Vulnerable to CSRF. but not to XSS?

How to prevent Rust's Url::parse from auto-encoding and instead throw error?