How to avoid leakage to prevent XSS attacks?

Question

To prevent XSS attacks, output shielding enabled;

The above is from symfony, but I do not understand.

Answer 1

XSS is an acronym for Cross-Site Scripting. Cross-site scripting attacks occur when you manage to hide a script (usually javascript) on someone else’s website where it can be maliciously launched.

XSS , -. , -, , My name is <script src="http://bad.domain/evilscript.js"></script>. , , , , HTML, , , script .

, escape. Escaping , ( ) , . HTML < > ( ), HTML. < > (. PHP htmlspecialchars()), HTML- .

Symfony , , , .

Answer 2

XSS, - - javascript . , , javascript google.com, javascript, , Google , .

, ( / ), HTML , .