News for hackers. Stuff that matters.
Re:JQuery magicpreview plug-in by debt on Thursday November 20, 2008 @01:04PM (#370807)
This is only on the front end. If the backend filters html tags then XSS won't be a problem.
Re:JQuery magicpreview plug-in by adamc on Friday November 21, 2008 @07:57AM (#371848)
Filtering tags is notoriously difficult, though, because of the variety of encodings possible. Maybe you meant "properly encodes output"? That's the typical solution.