security - character entities in HTML attributes -



security - character entities in HTML attributes -

i'm studying article: https://www.owasp.org/index.php/xss_%28cross_site_scripting%29_prevention_cheat_sheet , , thought html entities must escaped in attribute values different html content.

but want know origin, html spec? can't find it, can point me direction? thanks.

it's more of dom issue. here jump-off point http://www.technicalinfo.net/papers/css.html

html security

Comments

Popular posts from this blog

assembly - What is the addressing mode for ld, add, and rjmp instructions? -

vowpalwabbit - Interpreting Vowpal Wabbit results: Why are some lines appended by "h"? -

ubuntu - Bash Script to Check That Files Are Being Created -