If your site ever displays text on the page that end users have control over, you should be concerned about XSS attacks. This could come in the form of user comments at the bottom of an article, user-generated content, or user profile information. In many instances, the user should never be entering any HTML and you might simply fully escape that text with HTMLEditFormat() or EncodeForHTML() as you output it.
Other times you may be dealing with a forum or message board t...
We are so excited to welcome our new product in the
Thanks to team member Sana Ullah, we have upgraded our Groovy Loader project to version 3.0. This version includes several updates like it sports a new interceptor called GroovyStarter that you can configure in your configuration file and the entire groovy environment will wrap itself and become available in any ColdBox 3.5 application.
