PimpMyLog icon indicating copy to clipboard operation
PimpMyLog copied to clipboard

HTML Entities for Special Characters

Open RealityRipple opened this issue 6 years ago • 0 comments

In order to prevent element (and script) injection via the Referer and User Agent tags, which can be manipulated via request headers, <, >, ", ', and \ are replaced with &#dd; character code entities in all log rows.

RealityRipple avatar Nov 25 '19 16:11 RealityRipple