xss
Zend Framework Input/Output XSS Filtering: Strip Tags, Textile, BBCode
In my CMS application, administration users can add HTML content via a WYSIWYG editor that gets filtered by HTMLPurifier.I am no开发者_开发知识库w wanting to add a message board functionality. I am pl[详细]
2023-04-12 16:57 分类:问答Securely rendering hyperlinks in untrusted text
As part of a project, I\'m accepting text fro开发者_JAVA百科m a user via web form and displaying it on a web page. The text they provide may contain URLs, if so I\'d like to render it as a hyperlink f[详细]
2023-04-12 11:26 分类:问答CSRF, XSS and SQL Injection attack prevention in JSF
I have a web application built on JSF with MySQL as DB. I have already implemented the code to prevent CSRF in my开发者_运维百科 application.[详细]
2023-04-12 07:53 分类:问答Do we need to use HttpUtility.HtmlEncode for Resources to prevent XSS?
We need to use HttpUtility.HtmlEncode on our website. Do we need to use it for Resources? Is there any potential thre开发者_如何转开发at?[详细]
2023-04-11 02:11 分类:问答Embedding your site's functionality into anothers with Rails 3 (XSS vs iframes)
We are looking to integrate the display of some of our models, as well as a payment process, with some of our client\'s websites. It seems that everybody is going the Iframe route, but this also looks[详细]
2023-04-09 23:37 分类:问答How to escape html?
Im using jQuery Markitup to allow users to input html... So they can input stuff like: <h1>Foo</h1>[详细]
2023-04-08 11:20 分类:问答Is PhoneGap secure?
How much has phonegap been hardened against attackers? Especially XSS flaws in our own pages, where the PhoneGap API is exposed to an unknown attacker.[详细]
2023-04-08 09:55 分类:问答How to disable PhoneGap APIs/functionality?
Is there a recommended way to remove access to unneeded PhoneGap APIs? For example our app does not need to access the contact database.[详细]
2023-04-08 02:51 分类:问答How do I properly encode a mailto link?
I am generating some HTML and I want to generate an XSS- and database-content-safe mailto link.What is the proper encoding to use here?How\'s this?[详细]
2023-04-07 12:59 分类:问答Escape HTML in markdown in HAML
Is it possible, in Rails 3.1, to escape HTML in markdown in HAML to avoid XSS? I mean when you 开发者_开发知识库do something like:[详细]
2023-04-07 00:35 分类:问答