Security

In combostrap, we are taking security very seriously.

Below are the steps that we have taken to prevent the following attack.

Every form uses a token to prevent a cross-site request attack (CSRF))

To prevent an injection attack

• every HTML output is escaped to prevent HTML/Javascript injection.
• every SQL input is passed through parameters to prevent SQL injection

Dokuwiki follows also this rules (see devel:security). We are making use of the CSRF token functionality.

For any security concern or issue, you can contact us at security [at] combostrap [dot] com