From 64e3f4963580db76305e458f3652b98fcc42f6c6 Mon Sep 17 00:00:00 2001
From: ZeroPath <noreply@zeropath.com>
Date: Mon, 7 Apr 2025 02:59:00 +0000
Subject: [PATCH] fix: enhance XSS protection with strict validation and HTML5
 encoding

---
 test/index.php | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/test/index.php b/test/index.php
index f6293fb..824e08c 100644
--- a/test/index.php
+++ b/test/index.php
@@ -1,5 +1,13 @@
 <?php
+declare(strict_types=1);
 
-echo htmlspecialchars($_GET["test"], ENT_QUOTES, 'UTF-8');
+// Validate input exists
+if (!isset($_GET['test'])) {
+    die('Invalid input');
+}
+
+// Convert to string and sanitize
+$input = (string)$_GET['test'];
+echo htmlspecialchars($input, ENT_QUOTES | ENT_HTML5, 'UTF-8', true);
 
 ?>