Difference between Encoding, Escaping and Sanitizaton in context of Application Security for mitigating XSS

Please highlight the key differences between encoding, escaping and sanitizing input. How an input provided by user can be analyzed in an intercepting proxy like Burp Suite to tell it’s safe from XSS attacks? How these all ca… Continue reading Difference between Encoding, Escaping and Sanitizaton in context of Application Security for mitigating XSS

Can someone highlight the key difference between CRLF Injection, HTTP Response Splitting and HTTP Header Injection?

I believe each one of these is closely interlinked, for instance, HTTP Response Splitting will occur in event of CRLF characters injection (%0d%0a) and this will also involve injection of HTTP headers which control the HTTP r… Continue reading Can someone highlight the key difference between CRLF Injection, HTTP Response Splitting and HTTP Header Injection?