Questions tagged [strip-html]
The strip-html tag has no usage guidance.
1
question with no upvoted or accepted answers
1
vote
1answer
26 views
Sanitise low search keywords
What's a good method for stripping HTML from our site search? I've found that it's possible to inject HTML directly into our page like this:
https://website.co.uk?keywords="<svg/onload%3Dconfirm(//...