Cross-site scripting describes a variety of attacks against web applications, tricking them into executing code that compromises security. In this article, Stephen Enright shows how a combination of filtering and proper encoding can prevent such attacks.
Want to secure your web application? Don't leave the front door wide open. Exploits based on a failure to validate input allow attackers untold vulnerabilities to exploit, perhaps letting them execute arbitrary SQL statements. In this first of a two-part series, Stephen Enright shows you how...
