jQuery Security Best Practices — a practical guide to jQuery security with clear examples you can reuse in real projects.
jQuery Tutorial Series (98/101). Prefer one article? Read the complete jQuery tutorial.
Short description
Treat all user content as untrusted on the client and server.
Security checklist
Prefer .text() over .html() for user data
Sanitize if HTML required
CSRF tokens on state-changing AJAX
HTTPS everywhere
Don't eval JSON/P responses carelessly