Escaping and Sanitization

[blues]

Does anyone know if there’s a document or discussion anywhere that talks about how Wappler handles escaping and sanitization of data sent from/to the browser? (Also, maybe just generally how Wappler handles security would be good as well.)

Thanks.

[max_gb]

How secure is Wappler?

Cross Site Scripting You are in full control of your files and uploads. No scripts are included on the fly, so there is no chance of XSS SQL Injection Server Connect and Database Connector/Updater use strict parameters for all their input values, so No SQL Injection is possible. You can also add additional validation rules to all the input parameters to make sure they are what you expect - next to be even more secure it allows you to detect errors more easily. Other security We have integrated…

[blues]

Hi - Thanks for that.

I’ve noticed that the training videos pull data out of $_GET and $_POST vars. But not sure if we have to sanitize those before storing or using them or if they are already sanitized by the time we’re using them. Or if we have to handle the escaping of data ourselves before we send it back to the screen.

Thanks!