Add escaping of dynamic content

This commit is contained in:
2025-09-18 09:01:31 +02:00
parent 9ddb744fdd
commit dff078537e
3 changed files with 4 additions and 5 deletions
+1 -2
View File
@@ -1,5 +1,4 @@
input validation to avoid XSS and injection
only allow signup, login ecc over HTTPS
session expiration
mark cookies as secure
consider SameSite=Strict
consider SameSite=Stricts