How do I prevent XSS

XSS Prevention, Web Security, Input Validation

This content describes methods and techniques to prevent Cross-Site Scripting attacks on web applications.


        <?php
        // Example of sanitizing user input to prevent XSS
        function sanitizeInput($data) {
            return htmlspecialchars($data, ENT_QUOTES, 'UTF-8');
        }

        // Example usage
        $userInput = '';
        $safeInput = sanitizeInput($userInput);
        echo $safeInput; // Outputs: <script>alert("XSS Attack!")</script>
        ?>