dubey/WebGoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #639 from jskiba99/patch-2

Browse Source 
Update CrossSiteScripting_content9.adoc
This commit is contained in:
René Zubcevic 2019-08-22 11:14:38 +02:00 committed by GitHub
commit 73553d91d3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
webgoat-lessons/cross-site-scripting/src/main/resources/lessonPlans/en/CrossSiteScripting_content9.adoc
View File

@ -39,7 +39,7 @@ _$selector.*text*(someEncodeHtmlMethod(userInputHere))_
http://underscorejs.org/#template
https://nvisium.com/blog/2015/05/21/dont-break-your-backbone-xss-mitigation/
https://nvisium.com/blog/2015/05/21/dont-break-your-backbone-xss-mitigation.html
==== Angular
Angular has sought to escape by default, but the expression language has proven to have 'sandbox' escapes. Best to check