Is there a definitive anti-XSS library for PHP?

后端 未结 7 2164
长发绾君心
长发绾君心 2020-12-14 08:14

I already know how XSS works, but finding out all the many different ways to inject malicious input is not an option.

I saw a couple libraries out there, but most of

7条回答
  •  小蘑菇
    小蘑菇 (楼主)
    2020-12-14 08:35

    OWASP offers an encoding library, on which time has been spent to handle the various cases.

    Obsolete: http://www.owasp.org/index.php/Category:OWASP_Encoding_Project

    Now at http://code.google.com/p/reform/
    and OWASP's antiXSS specific library is at: http://code.google.com/p/php-antixss/

提交回复
热议问题