JavaScript Passion

There is a Node.js project that sanitizes data and there is an OWASP library for JavaScript that ha… Read more Javascript Xss Prevention

Is it possible to make AJAX-calls (e.g. using jQuery.ajax() ) from local html/js file (e.g. file://… Read more Ajax Calls From Local Javascript Code To Remote Server

I was reading about CORS and I think the implementation is both simple and effective. However, unle… Read more Cross-origin Resource Sharing (cors) - Am I Missing Something Here?

I've got a problem in my current project: Users can send an email using a textarea. We allow th… Read more Avoid Xss And Allow Some Html Tags With Javascript

I have a rich text editor that passes HTML to the server. That HTML is then displayed to other user… Read more Filtering Javascript Out Of Html

How can I totally prevent xss-attacks in PHP? This is assuming I do not care for any HTML tags or o… Read more Php: How To Totally Prevent Xss Attacks?

I am starting to use the Share button from Google. I am actually using the Share link, and at some … Read more Escape User-generated Content - What Does That Mean?

I'm having to work on an old web app that a previous developer left. It is using addslashes() t… Read more Is Addslashes() Safe To Prevent Xss In A Html Attribute?