0x06-OutputEncoding.md

Output encoding

Allocated to Viral

Background

Principles (if any)

Positive controls

Control

How to build a secure using Control to help you, including (or even just) UML diagrams. I prefer swim lanes, but as long as it prints in landscape mode, I'm cool. I don't want portrait diagrams as this is impossible to reflow automatically using our tools.

Control

How to build a secure using Control to help you

Unit or Integration Test Cases

Abuse Cases

Negative patterns

Control that should never ever appear under pain of infinite nyan cat

e.g. shared knowledge questions or answers, or dynamic SQL queries

References

---

When and where to encode

SQL

HTML value

HTML attribute

XML value

XML attribute

CSS entity

CSS style