Told you I don’t update often…<\/p>\n\n\n\n
Anyway, I did a small update to that validation project. Apparently, it allowed for xss<\/a> attacks. Good thing there’s nothing valuable to get from my site (I think). So, for example, if I was to enter the following in the sitemap text box<\/p>\n\n\n\n an alert would come up that says “hi”. I think I solved the problem by using htmlspecialchars<\/a>. And just to be safe, I used the same solution for displaying the urls in the table. You can try it here<\/a>. Unfortunately, I don’t have a lot of experience in xss. Is there anything I’m missing or should be more aware of?<\/p>\n","protected":false},"excerpt":{"rendered":" Told you I don’t update often… Anyway, I did a small update to that validation project. Apparently, it allowed for xss attacks. Good thing there’s nothing valuable to get from my site (I think). So, for example, if I was to enter the following in the sitemap text box blah.xml “\/><script type=”text\/javascript”>alert(“hi”);<\/script><input type=”hidden an alert … <\/p>\nblah.xml \"\/><script type=\"text\/javascript\">alert(\"hi\");<\/script><input type=\"hidden<\/code><\/p>\n\n\n\n