XSS - Securing Laravel

In Depth

In Depth: Pentesting Laravel part 3 - Looking for "Interesting" Code

[In Depth #29] It's time to spend some time looking for smelly or suspicious code, searching for common patterns and functions that usually show up around weaknesses. 🕵️

Security Tips

Security Tip: What Is An HttpOnly Cookie?

[Tip #86] Cookies come in many shapes and sizes, and with multiple attributes just to confuse you... Have you ever wondered what the humble HttpOnly attribute actually does?

Security Tips

Security Tip: Do You Have a Permissions Policy?

[Tip #85] What browser features do you have enabled on your site, and what can an XSS attack do if you don't disable them?

Security Tips

Security Tip: Don't Use nl2br()!

[Tip#67] As useful as it sounds, nl2br() can potentially leave you open to Cross-Site Scripting (XSS) vulnerabilities... you should reach for CSS instead!

Security Tips

Security Tip: Escape Output with e(), htmlspecialchars(), & htmlentities()!

[Tip#64] Do you know the difference between `e()`, `htmlspecialchars()`, & `htmlentities()`? Can we just use `e()` for everything?

Security Tips

Security Tip: Is `strip_tags()` Secure?

[Tip#63] PHP includes a some really handy security-focused functions, but you need to know how to use them correctly, or you risk leaving a significant vulnerability waiting to be exploited! 😱