How to allow user input with ' ' safely?

Question

For sake of XSS attack, my project has code below that strips unsafe characters:userInput.

Answer 1

Another possibility for error like this is when there is a class name collision
Check out https://www.google.com/about/appsecurity/learning/xss/ for more info

Comments

It removes only those lines that are followed by another empty line

---

One problem with this trick is that description attribute cannot be localized. Then set that value in the path

Answer 2

I encountered this same problem in an app that had very minimal use of sessions. For more info on these builders check out http://www.howtocreate.co.uk/tutorials/javascript/security

Answer 3

You can find more information on How to enable JavaScript in your browser and why

Comments

Hopefully this will be little helpful

---

I have run into this problem in two scenarios

Answer 4

For the very beginner HTML5 & JavaScript Security - Security innovation is also a nice one
Click on button and all work well again