Update ql/src/queries/security/cwe-079/ReflectedXSS.qhelp

Co-authored-by: Nick Rolfe <nickrolfe@github.com>
This commit is contained in:
Alex Ford
2021-09-08 12:12:53 +01:00
committed by Alex Ford
parent eed87b3319
commit ed708c1903

View File

@@ -13,9 +13,9 @@
<recommendation>
<p>
To guard against cross-site scripting, consider escaping the input before
writing user input to the page. In some frameworks, such as Rails, escaping will
be performed implicitly and by default.
To guard against cross-site scripting, escape user input before writing it
to the page. Some frameworks, such as Rails, perform this escaping
implicitly and by default.
</p>
<p>