Prevent XSS Vulnerability

This plugin helps safeguard your website against two common types of Cross-Site Scripting (XSS) vulnerabilities:

• Reflected XSS: This happens when harmful scripts are hidden in a website’s URL. If a user clicks a link with such a script, it can run in their browser, potentially stealing their data or taking control of their system.
• Self-XSS: This occurs when a user’s own input on your website is displayed back to them in an unsafe way, allowing malicious scripts to run in their browser.

This plugin provides several layers of protection:

Blocking: When active, the plugin checks URLs for specific characters. If it finds any of these characters in the URL, it redirects the user to prevent a potential XSS attack. You can customize which characters to block or allow.

• Opening Round Bracket (
• Closing Round Bracket )
• Less than Sign <
• Greater than Sign >
• Opening Square Bracket [
• Closing Square Bracket ]
• Opening Curly Bracket {
• Pipe or Vertical Bar |
• Closing Curly Bracket }

Encoding: For an extra layer of security, the plugin encodes certain characters found in URL parameters. This stops harmful code from running, even if it’s present in the URL. You can also choose to exclude specific parameters from being encoded.

• Exclamation Mark !
• Double Quotation "
• Single Quotation '
• Opening Round Bracket (
• Closing Round Bracket )
• Asterisk Sign *
• Less than Sign <
• Greater than Sign >
• Grave Accent “`
• Cap Sign ^