So I’ve been toying around with HTTP for fun in telnet now (i.e. just typing in telnet google.com 80 and putting in random GETs and POSTs with different headers...
How do I prevent XSS (cross-site scripting) using just HTML and PHP? I’ve seen numerous other posts on this topic but I have not found an article that clear...
Is there a catchall function somewhere that works well for sanitizing user input for SQL injection and XSS attacks, while still allowing certain types of HTML tags? 1 18