How to prevent <script>alert('data');</script> to execute in client?

Question

how to prevent this situation where we are providing the header as a javascript and when it will display in frontend it will execute the script mentioned. so how to handle this type of situation.

possible duplicate of avoid javascript injection while maintaining HTML? — Kristof Feys
– Kristof Feys, Commented May 11, 2015 at 11:33

lagerone · Accepted Answer · 2015-05-11 11:30:11Z

0

You should HtmlEncode the content before sending it to the client.

answered May 11, 2015 at 11:30

lagerone

1,78714 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to prevent <script>alert('data');</script> to execute in client?

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related