Geek Answers Handbook

Bootstrap XSS attack on Popovers

I read here that I can include HTML in a popover, which can be a potential problem for XSS attacks.

In my case, popovers will not contain anything like forms or the like, but only text or links or tables or images.

Is it safe to use them without XSS attacks?

Thanks!

SN

+5
source share
1 answer

As long as you provide html it's safe to use them. It is only unsafe to enable html when the content comes from user input and is not subject to preliminary disinfection.

+6
source

More articles:


All Articles