PHP XSS Prevention WhiteListing
- by pws5068
My site utilizes a WYSIWYG editor for users to update their accounts,enter comments, and send private messages.
The editor (CKEditor) is great for only allowing users to enter valid input, but I worry about injection through TamperData or other means.
How can I control this on the server side?
I need to whitelist specific tags: <b><ul><ol><a><img><br>, will this be a SAFE approach to preventing XSS?