4 Replies Latest reply on Mar 23, 2017 8:24 AM by haxtbh

    How to handle XSS attack?




      Is there any way to prevent a XSS attacks in cold fusion in already established project?


      I used encodeForHTML(url.NewValue) for an input but applying this to every input of Form of all the pages in the project won't be possible.

      Is there a way to do this from single location without affecting rest of the code in project?