Background
📘Note
Although Pollux has mitigated XSS risks by setting the Content-Type of HTTP APIs to application/json, a few APIs lack input validation. To better protect user data security, we strongly recommend encoding any data obtained from the APIs before displaying it in any UI, especially when the parameter visible = true is enabled by default.A typical XSS protection method involves encoding all data received from the APIs for use in HTML. Use methods such as encodeURIComponent() or escape() to encode the data, which will convert special characters into their HTML entities and prevent them from being interpreted as HTML code by the browser. Ensure proper implementation of XSS protection for all data from the APIs to guarantee user data security. For more information about XSS protection, it is recommended to refer to the following resources: OWASP XSS Prevention Cheat Sheet.
Network | URL |
---|---|
Mainnet | https://expfullnode.poxscan.io |
Testnet | https://testnet-fullnode.poxscan.io |