|
xss?...
xss remarkably subject to adroit work that one would not think of, and if you get good enough maybe .... just maybe.
The rfc for html states what characters are allowable, only a very few need to be escaped or taken out of the stream or something. If you ever get an actual incident, I suggest logging everything and thowing an exception. It just depends on what you need to protect. Consider for example <sci"ipt> and something that removes quotes or something,...
Marty Hall has some sample code cleaner code on his site or in his books.
__________________
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
.
Cybercartography: A new theoretical construct proposed by D.R. Fraser Taylor
|
Linear Mode
