Welcome Guest, Not a member yet? Register   Sign In
WYSIWYG HTML Editor and Security
#1

Hello and thank you for taking the time to read this.

Im using a WYSIWYG HTML Editor (CKEditor) to allow the end user to use HTML. This will then be outputted at a later stage via the website. 

  • Is the XSS filter from the security class (https://codeigniter.com/user_guide/libra...urity.html) sufficient enough? 
  • Should I add additional protection such as HTML purifier?
  • Should I use regex or strip tags to filter any unwanted tags?
  • What's the best practice outputting data from WYSIWYG HTML Editor?




Thanks in Advance.
Reply


Messages In This Thread
WYSIWYG HTML Editor and Security - by whatsmyname - 10-22-2019, 03:49 PM
RE: WYSIWYG HTML Editor and Security - by PaulD - 10-23-2019, 12:54 AM



Theme © iAndrew 2016 - Forum software by © MyBB