New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SEC,PRF: templates/main.html: build w/ DOM nodes #62

Open

westurner wants to merge 1 commit into karpathy:master from westurner:build_dom_nodes

westurner commented Feb 27, 2017 •

edited

Loading


          SEC,PRF: templates/main.html: build w/ DOM noes

5d7a7e5

https://www.owasp.org/index.php/DOM_based_XSS_Prevention_Cheat_Sheet#####

Author

westurner commented Feb 27, 2017 •

edited

Loading

note: I haven't tested this change but I think it should work.

TST: run {unit, functional, browser} tests?

Owner

karpathy commented Feb 27, 2017

I think this is a good idea. I'll test that it works and merge if so. Thank you!

westurner changed the title ~~SEC,PRF: templates/main.html: build w/ DOM noes~~ SEC,PRF: templates/main.html: build w/ DOM nodes

Author

westurner commented Feb 27, 2017

Thanks!

Author

westurner commented Feb 27, 2017 •

edited

Loading

"What is the most efficient way to create HTML elements using jQuery?"
https://stackoverflow.com/a/327068
- ... https://jsperf.com/jquery-vs-vanilla-createelement

Author

westurner commented Feb 27, 2017

"RULE #5 - URL Escape then JavaScript Escape Before Inserting Untrusted Data into URL Attribute Subcontext within the Execution Context"
- "In what situations can element.setAttribute allow XSS?"
  http://security.stackexchange.com/a/139861

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet