Open sergiotarxz opened 4 years ago
Since sometimes is difficult to say where a value given by the CMS comes from it may be worth to use htmlentities with all the PHP output to ensure XSS cannot happen.
Since sometimes is difficult to say where a value given by the CMS comes from it may be worth to use htmlentities with all the PHP output to ensure XSS cannot happen.