=== Prevent XSS Vulnerability ===
Contributors: sasiddiqui
Tags: attack, cross-site scripting, security, vulnerability, xss
Requires at least: 3.5
Tested up to: 5.0
Stable tag: 0.2
License: GPLv3
License URI: https://www.gnu.org/licenses/gpl-3.0.html

Check the URL and Redirect it if any XSS Vulnerability found.

== Description ==

Check the URL and Redirect it if any XSS Vulnerability found. This plugin encodes the following signs and then Remove some XSS signs from the URL as shown below:

=== Encode Parameters ===

* Exclamation Mark `!`
* Double Quotation `"`
* Single Quotation `'`
* Opening Round Bracket `(`
* Closing Round Bracket `)`
* Asterik Sign `*`
* Less than Sign `<`
* Greater than Sign `>`
* Hyphen `
* Cap Sign `^`
* Opening Square Bracket `[`
* Closing Square Bracket `]`
* Opening Curly Bracket `{`
* Mod Sign `|`
* Closing Curly Bracket `}`

=== Remove Parameters ===

* Opening Round Bracket `(`
* Closing Round Bracket `)`
* Less than Sign `<`
* Greater than Sign `>`
* Opening Square Bracket `[`
* Closing Square Bracket `]`
* Opening Curly Bracket `{`
* Mod Sign `|`
* Closing Curly Bracket `}`

This Plugin also `Escape HTML` in `$_GET` variable. `$_GET` is mostly used to put the values in HTML from the URL. This Check is quite useful if your site using/getting anything from the URL and printing it in HTML. It secures your Search and other sections as per your site working.

NOTE: MAKE SURE TO CHECK YOUR FORMS AFTER ACTIVATING THE PLUGIN ANF IF YOU HAVE WOOCOMMERCE SITE THEN PLEASE ALSO CHECK THE CART AND CHECKOUT PROCESS.

=== Thanks for the Support ===

The support from the users that love Prevent XSS Vulnerability is huge. You can support Prevent XSS Vulnerability future development and help to make it even better by leaving a [5 star rating with a nice message](https://wordpress.org/support/plugin/prevent-xss-vulnerability/reviews/?rate=5#new-post) to me :)

=== Bug reports ===

Bug reports for Prevent XSS Vulnerability are [welcomed on GitHub](https://github.com/yasglobal/prevent-xss-vulnerability). Please note GitHub is not a support forum, and issues that aren't properly qualified as bugs will be closed.

== Installation ==

This process defines you the steps to follow either you are installing through WordPress or Manually from FTP.

**From within WordPress**

1. Visit 'Plugins > Add New'
2. Search for Prevent XSS Vulnerability
3. Activate Prevent XSS Vulnerability from your Plugins page.
4. Go to "after activation" below.

**Manually**

1. Upload the `prevent-xss-vulnerability` folder to the `/wp-content/plugins/` directory
2. Activate Prevent XSS Vulnerability through the 'Plugins' menu in WordPress
3. Go to "after activation" below.

**After activation**

1. Go to the plugin settings page and set up the plugin for your site.
2. You're done!

== Frequently Asked Questions ==

= Q. Why should I install this plugin? =
A. Installing this plugin is the easiest way to prevent your site from XSS Vulnerability.

= Q. Does this plugin escape HTML in priting search? =
A. Yes, this plugin escape HTML in `$_GET` varaible which is mostly use to print the data from the URL to HTML. If your site is using `$_GET` then it is safe and the HTML will be escaped otherwise you need to check.

= Q. Does this plugin has any conflict with anyother plugin? =
A. No, this plugin doesn't have any conflict with any plugin.

== Changelog ==

= 0.2 - Dev 02, 18 =

  * Enhancements
    * Added Escaped HTML Feature in `$_GET` variable
    * Optimized Function to have better performance

= 0.1 - Aug 24, 17 =

  * First release on wordpress.org.