mardi 22 mars 2016

Is xss attack possible between html tag while < and > are encoded

Is xss attack possible between html tag while < and > are encoded? for example:

<tag>{{output}}</tag>

if "<", ">" in {{output}} are encoded into "&lt;", "&gt;", and cannot be , can xss happen?




Aucun commentaire:

Enregistrer un commentaire