Timeline for Why is single quote sign escaped inside render element attribute?
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 23, 2021 at 11:54 | vote | accept | MilanG | ||
| Aug 20, 2021 at 18:13 | answer | added | avpaderno♦ | timeline score: 0 | |
| Aug 20, 2021 at 15:05 | comment | added | Clive♦ | I want a t-shirt with that on @Hudri, great phrase! | |
| Aug 20, 2021 at 14:55 | comment | added | Hudri | Basically in 99 of 100 cases the answer to Why is it escaped? is Because someone found a security issue ;-) | |
| Aug 20, 2021 at 14:49 | comment | added | Hudri |
*Why is that happening and can it be prevented? * Because it takes only 2 seconds to see the massive security issue: <a class="It's a nice day"... vs. <a class='It's no longer a nice day but a security issue by onclick='evilCode()'... Do NOT prevent that.
|
|
| Aug 20, 2021 at 14:24 | history | asked | MilanG | CC BY-SA 4.0 |