XSS Vulnerabilities for HTML link tags
<p>The security team ran a vulnerability check on my website, which is showing a lot of XSS vulnerabilities.</p>

<p>All the vulnerabilities can be categorized in to the below three:</p>

<p><strong>Script include after double quote</strong>: For the link tags, it shows that a script can be added after the double quote of an href attribute as below:</p>

<pre><code>&lt;link rel = "canonical" href="http://www.unitedforever/about/alliance/?"&gt;&lt;script src=as213eS.js&gt;
</code></pre>

<p><strong>A tag after double quote:</strong> </p>

<pre><code>&lt;link rel = "canonical" href="http://www.unitedforever/about/alliance/?"&lt;a href=javascript:alert(12312)&gt;aa&lt;/a&gt;
</code></pre>

<p><strong>SVG tag after double quote:</strong></p>

<p><code>&lt;link rel = "canonical" href="http://www.unitedforever/about/alliance/?"&gt;&lt;svg onload=alert(12321</code>)></p>

<p>Googling didn't help much on how to prevent these types of vulnerabilities. Any suggestions?</p>