JavaScript Charts

I am starting to use the Share button from Google. I am actually using the Share link, and at some … Read more Escape User-generated Content - What Does That Mean?

I have written a micro-templating utility that uses innerHTML to inject html fragments in a Web pag… Read more Prevent Script Injection With Innerhtml

There is a Node.js project that sanitizes data and there is an OWASP library for JavaScript that ha… Read more Javascript Xss Prevention

Let's say I want to use this API: http://hiveminder.com/help/reference/API.html The instructio… Read more How Do I Begin With Making A Small Cross-site Ajax Script Using Someone's Api?

Imagine a scenario where I want to continuously invoke user-supplied Javascript code, like in the f… Read more How To Safely Run User-supplied Javascript Code Inside The Browser?

I'm sure that the answer to this question is No, but I can't seem to find a way that simply… Read more Is Escaping < And > Sufficient To Block Xss Attacks?

I create a script for try remove insecure content (I'm using it for browser extensions): I'… Read more Can A "new Domparser.parsefromstring" Be Safer Than "createelement"?

I am trying to use Ajax to submit a query to an external database (http://foreignserver:1234/databa… Read more Running A Query And Retrieving Xml From An External Site