I created a visualforce page, and i get some data(HTML) from webservice and store it in Custom Object as LongText, When i retrieve it and display in my visual force page something like this
<apex:outputText value = "{!myobjdata}" escape=false/>
It works fine, But when i give my application for the review, Then the Security Scanner gives error with above line and SELECT query of my object in class file (XSS_STORED)
Then I read about this XSS, and I added my data to visualforce page as below
<apex:outputText value = "{!HTMLENCODE(myobjdata)}" escape=false/>
But, now the data(HTML) in my object shows as it is like
<div><ul>someinfo<li>point1</li><li>point2</li></ul></div>
in my visualforce page The HTML content is not rendered, How can i Overcome these issues (Mainly XSS)
Please help
{}
for pre-formatted text so it won't be ignored or start it on a new line and space each line over by at least 4 spaces.