2022-01-09, 08:17 PM
(This post was last modified: 2022-01-09, 08:18 PM by Crazycat. Edited 1 time in total.)
(2022-01-09, 06:03 PM)Noter33 Wrote:(2022-01-09, 05:58 PM)Crazycat Wrote: I submit a modification of the regexp in the tutorial
REGEX is not XSS security , every regex you would use there is inefficient there will be always a bypass
The regex will validate (or refuse) the value given. That's the better way (not the best) to limit risks.
If you don't want any risk, do not allow external contents or anything you cannot really trust in custom fields, or better don't use custom field.