Closed ghost closed 9 years ago
Called htmlentities on value of textarea to prevent XSS injection. Example: Someone creates a post with in it. Some admin clicks on edit and JavaScript will be executed. (could leak cookie of admin)
Called htmlentities on value of textarea to prevent XSS injection. Example: Someone creates a post with