strong-error-handler/views
Zachery Metcalf 35328be26b
Escape strings in HTML output (XSS fix)
Modify the template producing HTML error responses to correctly
escape all strings that are possibly coming from the client making the
request. Before this change, the error responses were vulnerable to XSS
(cross-site scripting) attacks.
2018-01-25 14:16:24 +01:00
..
default-error.ejs Escape strings in HTML output (XSS fix) 2018-01-25 14:16:24 +01:00
style.css HTML response for accepted headers 2016-06-14 12:04:32 -04:00