Skip to:
Remove the encoding in the handlers and put it in the actual layout at the point of use.
Make sure we do the same for the prc.pageTitle, prc.metaDescription and prc.metaKeyWords variables.
prc.pageTitle
prc.metaDescription
prc.metaKeyWords
We need to be able to prevent things like the following:
reference:
Luis Majano mentioned this issue in a commit of Ortus Websites / www.forgebox.io on branch development:
Merge branch 'add-consistent-xss-mitigation' into 'development'
Javier Quintero mentioned this issue in a merge request of Ortus Websites / www.forgebox.io on branch add-consistent-xss-mitigation:
#resolve Add consistent xss mitigation on all views
Javier Quintero mentioned this issue in a commit of Ortus Websites / www.forgebox.io on branch add-consistent-xss-mitigation:
Remove the encoding in the handlers and put it in the actual layout at the point of use.
Make sure we do the same for the
prc.pageTitle,prc.metaDescriptionandprc.metaKeyWordsvariables.We need to be able to prevent things like the following:
reference: