Скачать или смотреть Golang Tutorial Extra Step 2 - Cross Site Scripting (XSS) and BlueMonkey

Today, we're going to take a sidestep and talk a little bit about Cross Site Scripting (XSS) with Golang. When I say "a little bit", I mean a little bit because I don't know too much about it, but I want to share what I do know.

I'm going to share a little bit about how to protect yourself from it. Let's refer to the example here: https://en.wikipedia.org/wiki/Cross-s....

Basically, we have a site, and if an attacker passes in javascript in the params and that javascript executes, that means we have a security vulnerability. That means, we can exploit it with a custom script.

As a worse-case scenario guy, this is something I think about. My own site is pretty well protected, the above sequence won't do anything. However, I still wanted to be on the safer side and sanitize the user input that my users generate (for example, a short biography about themselves).

In comes bluemonday, a HTML sanitizer. I highly recommend you check it out. Apparently, it protects against 90% of the cases out there (with the UGCPolicy())?

At any rate, that's all I have to share. As I said in the beginning, I don't know too much about XSS, so if you are a pro, leave some notes in the comments to educate myself and everyone else!

Accompanying medium article:   / golang-tutorial-extra-step-2  

Don't forget to like, comment, and subscribe!!!

========================================================
Reference Links
========================================================
Cross Site Scripting by Wikipedia: https://en.wikipedia.org/wiki/Cross-s...

BlueMonday HTML Sanitizer: https://github.com/microcosm-cc/bluem...
========================================================
Connect with me!
========================================================
Linkedin:   / donaldlee50  
Instagram:   / donlee50  
Twitter:   / donaldlee50  
Youtube:    / coursehack  
Mailing List: http://bit.ly/coursehack-mailing-list
Coursehack's Facebook Group: bit.ly/join-coursehack-facebook-group

Don't forget to like, comment, and subscribe!