rspec/rules/S5696/common/pitfalls/modification-after-sanitization.adoc

4 lines
301 B
Plaintext
Raw Normal View History

==== Modification after sanitization
Caution should be taken if the user-supplied data is further modified **after** this data was sanitized. Doing so might void the effects of sanitization and introduce new XSS vulnerabilities. In general, modification of this data should occur beforehand instead.