Skip to content
UPEEC

HTML Security Considerations

Prevent XSS and related attacks in markup.

Intermediate
Comments 0

Escape user content, avoid inline scripts (use a Content-Security-Policy), sandbox iframes, add rel="noopener noreferrer", and use HTTPS for all resources.

Spotted a mistake or want to add detail? Suggest an improvement — Content Contributors' edits are reviewed by editors before they go live.

Discussion (0)

Sign in or join free to ask questions and discuss this topic.