title: Datatables server side processing draw parameter
body: <p>In the datatable draw parameter <a href="https://datatables.net/manual/server-side#DataTables_Table_1" rel="nofollow">documentation</a> said </p>
  
  <blockquote>
    <p>is <strong>strongly recommended for security reasons</strong> that you cast this parameter to an integer, rather than simply echoing back to the client what it sent in the draw parameter, in order to prevent Cross Site Scripting (XSS) attacks</p>
  </blockquote>
  
  <p>How can cast a parameter to int can help to prevent <a href="https://en.wikipedia.org/wiki/Cross-site_scripting" rel="nofollow">Cross Site Scripting</a>.?</p>