Does HTML encoding prevent XSS security exploits?

Question

By simply converting the following (\"the big 5\"):

& -> &
< -> <
> -> >
\" -> "
\' -> '
         


        

Answer 1

OWASP has a great cheat sheet.

1. Golden Rules
2. Strategies
3. Etc.

https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md