hermawanramadhan / CodeIgniter4-DataTables

MIT License
92 stars 38 forks source link

Escaping data from resultset #19

Closed erikkraijenoord closed 2 years ago

erikkraijenoord commented 2 years ago

Is your feature request related to a problem? Please describe. The output isn't escaped from query request, a simple JavaScript alert works on output.

Describe the solution you'd like I would like the output to be checked before pushed into the table to protect possible XSS. CodeIgniter4 has a few solutions build within the framework itself.

Additional context Check the output before showing it into to table based on type; string, integer, boolean etc.

20