Cross-site Scripting Techniques and Prevention
ALA serves up a great article addressing the dangers of cross-site scripting (XSS) vulnerabilities. Author Niklas Bivald says,
Validating and sanitizing user input is no longer optional. Consider what your users really need to do, think about what characters they need to accomplish those tasks, and strip/convert as necessary to protect your community.
Part 1 provides examples [...]
