Escape Output

    Code example - Don’t put untrusted data into your HTML

    1. <div>
    2.   <script>
    4. </script>

    Blog Quote: “When we don’t want the characters to be interpreted”

    From the Blog benramsey.com

    **

    <strong>This is bold text.</strong>

    Blog Quote: “You MUST use the escape syntax for the part of the HTML”

    From the blog OWASP XSS (Cross Site Scripting) Prevention Cheat Sheet_Prevention_Cheat_Sheet)

    **