mirror of
https://github.com/github/codeql.git
synced 2026-04-20 14:34:04 +02:00
Update ql/src/queries/security/cwe-079/ReflectedXSS.qhelp
Co-authored-by: Nick Rolfe <nickrolfe@github.com>
This commit is contained in:
@@ -13,9 +13,9 @@
|
|||||||
|
|
||||||
<recommendation>
|
<recommendation>
|
||||||
<p>
|
<p>
|
||||||
To guard against cross-site scripting, consider escaping the input before
|
To guard against cross-site scripting, escape user input before writing it
|
||||||
writing user input to the page. In some frameworks, such as Rails, escaping will
|
to the page. Some frameworks, such as Rails, perform this escaping
|
||||||
be performed implicitly and by default.
|
implicitly and by default.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
<p>
|
<p>
|
||||||
|
|||||||
Reference in New Issue
Block a user