<?xml version="1.0"?>
<rss version="2.0">
  <channel>
    <title>PHPDeveloper.org</title>
    <link>http://www.phpdeveloper.org</link>
    <description>Up-to-the Minute PHP News, views and community</description>
    <language>en-us</language>
    <pubDate>Thu, 23 May 2013 06:57:37 -0500</pubDate>
    <ttl>30</ttl>
    <item>
      <title><![CDATA[Evert Pot's Blog: Preventing XSS in Javascript strings]]></title>
      <guid>http://www.phpdeveloper.org/news/10741</guid>
      <link>http://www.phpdeveloper.org/news/10741</link>
      <description><![CDATA[<p>
<i>Evert Pot</i> has <a href="http://www.rooftopsolutions.nl/article/197">pointed out a handy tool</a> that can make escaping strings in and out of your application simpler - <a href="https://www.owasp.org/index.php/Category:OWASP_Encoding_Project">Reform</a>.
</p>
<blockquote>
<a href="https://www.owasp.org/index.php/Category:OWASP_Encoding_Project">Reform</a> is a tool that does exactly this. Reform allows you to escape your data for a javascript, xml, html or vbscript (yes it still exists) context. It provides libraries for Java, .NET, PHP, Perl, Python, Javascript and ASP. Pretty cool!
</blockquote>
<p>
The utility is simply included into the application an called via the static methods it adds. His example shows the escaping of some output text in a Javascript string to correctly prevent it from falling into an evil XSS scheme.
</p>]]></description>
      <pubDate>Fri, 01 Aug 2008 12:04:47 -0500</pubDate>
    </item>
  </channel>
</rss>
