Skip to content

Commit

Permalink
Update Cross_Site_Scripting_Prevention_Cheat_Sheet.md
Browse files Browse the repository at this point in the history
  • Loading branch information
dp-anto authored Sep 9, 2024
1 parent 150b08c commit a0768a9
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md
Original file line number Diff line number Diff line change
Expand Up @@ -194,7 +194,7 @@ elem.innerHTML = DOMPurify.sanitize(dangerVar);
**Safe HTML Attributes include:** `align`, `alink`, `alt`, `bgcolor`, `border`, `cellpadding`, `cellspacing`, `class`, `color`, `cols`, `colspan`, `coords`, `dir`, `face`, `height`, `hspace`, `ismap`, `lang`, `marginheight`, `marginwidth`, `multiple`, `nohref`, `noresize`, `noshade`, `nowrap`, `ref`, `rel`, `rev`, `rows`, `rowspan`, `scrolling`, `shape`, `span`, `summary`, `tabindex`, `title`, `usemap`, `valign`, `value`, `vlink`, `vspace`, `width`.
For attributes not reported above be aware to verify that if JavaScript code is provided as value then it can't be executed.
For attributes not reported above, ensure that if JavaScript code is provided as a value, it cannot be executed.
## Other Controls
Expand Down

0 comments on commit a0768a9

Please sign in to comment.