<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:media="http://search.yahoo.com/mrss/"><channel><title>Rich Text on Shaowen Chen's Website</title><link>https://www.chenshaowen.com/en/tags/rich-text/</link><description>Recent content in Rich Text on Shaowen Chen's Website</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>&amp;copy;2016 - {year}, All Rights Reserved.</copyright><lastBuildDate>Tue, 04 Jun 2019 00:00:00 +0000</lastBuildDate><sy:updatePeriod>weekly</sy:updatePeriod><atom:link href="https://www.chenshaowen.com/en/tags/rich-text/atom.xml" rel="self" type="application/rss+xml"/><item><title>How to Prevent XSS in Web Rich Text</title><link>https://www.chenshaowen.com/en/blog/how-to-prevent-xss-in-web-rich-text.html</link><pubDate>Tue, 04 Jun 2019 00:00:00 +0000</pubDate><atom:modified>Tue, 04 Jun 2019 00:00:00 +0000</atom:modified><guid>https://www.chenshaowen.com/en/blog/how-to-prevent-xss-in-web-rich-text.html</guid><description>1. How XSS Works and Several Common Attack Types An XSS attack is an attack that executes malicious scripts to steal a user&amp;rsquo;s login state, hijack a session, and so on. The input sources for malicious scripts include Cookies, Post forms, Get requests, HTTP header content, and more. We usually call a code fragment used for an XSS attack an XSS vector.</description><dc:creator>WeChat Official Account</dc:creator><category>XSS</category><category>Rich Text</category><category>Security</category><category>Web</category><category>R&amp;D</category></item></channel></rss>