search

ogamespec / ogame-opensource

This is revived OGame v 0.84 with old design.
Creative Commons Zero v1.0 Universal
81 stars 38 forks source link

Use htmlspecialchars #93

Open ogamespec opened 5 months ago

ogamespec commented 5 months ago

Посмотреть все места, где может пролезть XSS и использовать там htmlspecialchars.

https://www.php.net/manual/en/function.htmlspecialchars.php

ogamespec commented 2 months ago

First you need to collect statistics about which pages and how much they interact with the user. The best way is to collect all parameters for GET/POST requests in a table. Then we will think further.