Alex Richter

icon company @huntresslabs icon location Canada icon location Appsec @ Huntress

Results 3 comments of Alex Richter

Update default X-XSS-Protection value to 0

Howdy @JackMc! Any updates on when we might be able to expect a new major release being cut with this in it?

Escape / and > also so apps cannot be broken by browsers trying to 'correct' the HTML

Hey @ljharb or @goatslacker - would either of you have any bandwidth available to offer thoughts on the above proposal? Also, running tests locally seems to be passing now, so...

escape closing tags

Hey @ljharb - any luck getting the aforementioned tests to pass? Happy to help if needed.