annotate vendor/zendframework/zend-escaper/README.md @ 0:c75dbcec494b
Initial commit from drush-created site
author |
Chris Cannam |
date |
Thu, 05 Jul 2018 14:24:15 +0000 |
parents |
|
children |
5311817fb629 |
rev |
line source |
Chris@0
|
1 # zend-escaper
|
Chris@0
|
2
|
Chris@0
|
3 [](https://secure.travis-ci.org/zendframework/zend-escaper)
|
Chris@0
|
4 [](https://coveralls.io/r/zendframework/zend-escaper?branch=master)
|
Chris@0
|
5
|
Chris@0
|
6 The OWASP Top 10 web security risks study lists Cross-Site Scripting (XSS) in
|
Chris@0
|
7 second place. PHP’s sole functionality against XSS is limited to two functions
|
Chris@0
|
8 of which one is commonly misapplied. Thus, the zend-escaper component was written.
|
Chris@0
|
9 It offers developers a way to escape output and defend from XSS and related
|
Chris@0
|
10 vulnerabilities by introducing contextual escaping based on peer-reviewed rules.
|
Chris@0
|
11
|
Chris@0
|
12 - File issues at https://github.com/zendframework/zend-escaper/issues
|
Chris@0
|
13 - Documentation is at https://zendframework.github.io/zend-escaper/
|