Week 2 - Stored XSS

Mission: make the page show an alert using a comment.

Try: <script>alert('XSS')</script>

Comments

Secure Output

Use htmlspecialchars($text, ENT_QUOTES, 'UTF-8') before printing user input.