Glossary term
What is output encoding? Meaning for developers
Changing special characters such as < into safe codes such as < so the browser shows them as text, not as HTML.
Learn it properly · Security for DevelopersLesson 2: XSS, CSRF, Clickjacking and Security HeadersHow a script gets into your page and how to stop it with output encoding and CSP, how CSRF uses your cookies, SameSite and CSRF tokens, frame-ancestors, and the headers worth setting.