Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 2 Next »

Input validation is essential to prevent untrusted input of getting executed, the use of encoding libraries available can assist on enforcing strict input control. 

Encoding Libraries:

OWASP ESAPI

OWASP Java Encoder Project

DOMPurify

MentalJS

Java HTML Sanitizer

OWASP JSON Sanitizer

OWASP Java HTML Sanitizer

OWASP Java Encoder Project

Prevention:

DOM based XSS Prevention Cheat Sheet

Handling Untrusted JSON safely

Testing:

Testing Checklist

  • No labels