Does this plugin do anything against XSS? | ww.wp.xz.cn

Resolved Daan van den Bergh
(@daanvandenbergh)

3 years, 11 months ago

Recently I’ve disabled WordPress’ default search, because my server was being spammed with XSS attempts through the search bar.

So, my question is: does this plugin add any additional input validation to prevent this from happening?

Ideally an XSS attempt is blocked before form submission, not after.

Viewing 2 replies - 1 through 2 (of 2 total)

Plugin Author Ajay
(@ajay)

3 years, 11 months ago

The plugin only captures the search terms after the form is submitted or even if a visitor visits your site via the /?s= or /search/[term].

But, once it has captured, it with clean the terms to take out any banned words plus wp_kses_post.

See here: https://github.com/WebberZone/better-search/blob/master/includes/utilities.php#L21

Thread Starter Daan van den Bergh
(@daanvandenbergh)

3 years, 11 months ago

Okay, thanks for getting back to me!

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Does this plugin do anything against XSS?’ is closed to new replies.

2 replies
2 participants
Last reply from: Daan van den Bergh
Last activity: 3 years, 11 months ago
Status: resolved