How to disable the execution of JavaScript, when it is output to the page when it is contained in the data

We use jquery-datatable to render a piece of material obtained by table, and one of the columns will encounter something like:

8080::HTTP/1.1 200 OK | < script > window.location.href = " http://example:8080/a.asp";</script>

when rendering, the browser executes the script and the page jumps.
what can I do to prevent running JavaScript, to solve security implications?

Javascript
Mar.13,2021

Common security issues, the technical term XSS , you can search for related articles.

The simple solution here is to escape & < > and other special characters by html escape. 

& -> &
< -> <
> -> >
how to disable execution when outputting to a page

try to escape a string or fail direct validation when enters . A data is added only once, but you don't know how many times to visit it. 

");
    s = s.replace(/ /g, "");
    s = s.replace(/\'/g, "'");
    s = s.replace(/\"/g, """);
    s = s.replace(/\n/g, "<br>");
    return s;
}
xssText('<script>window.location.href = "http://example:8080/a.asp";</script>')

Previous: A class has an and b function,a calling b. Visit a now, how to get the name? of an in b

Next: Spark Job submission error: Initial job has not accepted any resources;.

css mysql arrays josn react html typescript webpack npm sass R objective-c .net sql-server jquery python-3.x angularjs django angular excel regex iphone ajax linux xml pandas vba spring database wordpress string wpf xcode windows bash postgresql oracle multithreading eclipse list firebase algorithm macos forms image scala visual-studio azure bootstrap spring-boot react-native python-2.7 docker performance function winforms matlab powershell apache dataframe api sqlite numpy rest shell selenium flutter dart maven loops qt swing android-studio csv express file class tensorflow sorting codeigniter perl
© 2021 CodesHelper
Advertising Contact us About us
Menu