annotate vendor/zendframework/zend-escaper/README.md @ 5:12f9dff5fda9
tip
Update to Drupal core 8.7.1
author |
Chris Cannam |
date |
Thu, 09 May 2019 15:34:47 +0100 |
parents |
5311817fb629 |
children |
|
rev |
line source |
Chris@0
|
1 # zend-escaper
|
Chris@0
|
2
|
Chris@0
|
3 [](https://secure.travis-ci.org/zendframework/zend-escaper)
|
Chris@2
|
4 [](https://coveralls.io/github/zendframework/zend-escaper?branch=master)
|
Chris@0
|
5
|
Chris@0
|
6 The OWASP Top 10 web security risks study lists Cross-Site Scripting (XSS) in
|
Chris@0
|
7 second place. PHP’s sole functionality against XSS is limited to two functions
|
Chris@0
|
8 of which one is commonly misapplied. Thus, the zend-escaper component was written.
|
Chris@0
|
9 It offers developers a way to escape output and defend from XSS and related
|
Chris@0
|
10 vulnerabilities by introducing contextual escaping based on peer-reviewed rules.
|
Chris@0
|
11
|
Chris@0
|
12 - File issues at https://github.com/zendframework/zend-escaper/issues
|
Chris@2
|
13 - Documentation is at https://docs.zendframework.com/zend-escaper/
|