Xss Attacks Prevention

I've found a 'database' of many XSS attacks and while this list provides quite a big list of attacks are there are any other attacks that didn't fall in the XML, what to look out f

Solution 1:

It is a very extensive topic and need detailed and up to date knowledge of the techniques used by hackers for accomplishing XSS. But to begin with you should not trust anything user inputs. Take it as potential attempt to hack your site or corrupt your database.

You can use many cleaning tools available to remove potential malicious input like:

for asp.net Microsoft Anti-XSS library, HTML Agility Pack from codeplex.

for PHP you can certainly use HTMLPurifier. It is very nice and capable tool.