jquery'html'对php'htmlspecialchars'安全吗？

Question

I use jquery ajax and some methods - after, replacewith, html. For all "get" and "post" data i use htmlspecialchars. Is it safe to use jquery methods when validate data using htmlspecialchars?

Answer 1

If you mean XSS-attack, it makes sense to format the output data:

htmlentities($str, ENT_QUOTES, 'UTF-8');

Incoming data must be escaped and checked for compliance with the type. What you output to the client affects only him.

htmlspecialchars only convert special characters to HTML entities. This function doesn't escape variables.