New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

运算符大于号>和小于号<不想被转码 #260

Open

Cossey11111 opened this issue Jun 10, 2022 · 1 comment

Cossey11111 commented Jun 10, 2022 •

edited

Loading

我通过xss不想把运算符转码，有什么办法可以保留大于号和小于号吗

Owner

leizongmin commented Jun 11, 2022

在 HTML 中 <> 本身就是有特殊含义的，所以一定要转义，否则它可能构造出 HTML 标签。
你这种情况可能是使用方法不当，如果要保留 <> 可能不需要通过 xss() 来过滤。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment