I am trying to protect my website from Cross-Site Scripting (XSS) and I'm thinking of using regular expressions to validate user inputs. Here is my question: I have a list of dangerous HTML tags...\[code\]<applet><body><embed><frame><script><frameset><html><iframe><img><style><layer><link><ilayer><meta><object>\[/code\]...and I want to include them in regular expressions - is this possible? If not, what should I use? Do you have any ideas how to implement something like that?
Regular expressions to prevent XSS or something else?
- Thread starter dreamylqq
- Start date