Preventing Cross Site Scripting Vulnerabilities

• Preventing Cross Site Scripting Vulnerabilities
  • Philosophy and General Rules
  • Types of Context and Escaping
  • Editing Template Files
  • Making Legacy Mako Templates Safe by Default
  • XSS Linter
  • Advanced Topics
  • Additional Resources
• Preventing XSS by Stripping HTML Tags
  • Overview
  • Mako filters for bleaching
  • Strip all HTML tags
  • Strip all but safe HTML tags
• Preventing XSS in Django Templates
  • HTML-escaping Translations in Django Templates
• Preventing XSS in React

---

Feedback