diff --git a/guides/source/security.md b/guides/source/security.md index 077b5094d6..8f72442bc1 100644 --- a/guides/source/security.md +++ b/guides/source/security.md @@ -773,7 +773,7 @@ As a second step, _it is good practice to escape all output of the application_, Network traffic is mostly based on the limited Western alphabet, so new character encodings, such as Unicode, emerged, to transmit characters in other languages. But, this is also a threat to web applications, as malicious code can be hidden in different encodings that the web browser might be able to process, but the web application might not. Here is an attack vector in UTF-8 encoding: ```html - ```