5 ms·
Simple JSON encoding alone is not sufficient if you put the output into a <script> tag. <script>const user_input = "</script><script>alert(1)//"; ...
by GICodeWarrior 1y ago
Simple JSON encoding alone is not sufficient if you put the output into a <script> tag.
<script>const user_input = "</script><script>alert(1)//"; ...