OWASP/SecureCodingDojo

The example used for snipXSS3.jsp does not seem correct

Opened this issue · 0 comments

dingjiedanielyang-sec commented

Hi Team,

Could you please double check the example mentioned under snipXSS3.jsp?

I believe the StringEscapeUtils.escapeHtml4 already handles single quotes and It is not necessary to replace the single quote again.

Thanks
Daniel