xss

相关标签：javascript jquery android 多少钱 iPhone

How do I know if my AJAX request is vulnerable to XSS?

A security firm surprise audited a web app I work on, and told me that there are XSS vulnerabilities. I don\'t really know where to begin.[详细]

2023-03-11 13:05 分类：问答
Anti XSS Sanitization of IFrames with specific src attribute values in .NET

I\'m looking to accomplish the following: sanitize WYSIWIG user-input using either AntiXSS or AntiSamy libraries, however, allow iframe tags which have \"src\" attribute from particul开发者_如何学运维[详细]

2023-03-11 11:39 分类：问答
Erlang functions/library to sanitize web input?

I like to prevent XSS on my project, i just use Erlang and nginx. Are there some libraries for this? Is there an alternative i didn\'t 开发者_如何学编程see?Take a look the escape function in mochiweb[详细]

2023-03-11 07:57 分类：问答
Is there any way to define a model's attribute as always html_safe?

I have a model called Feature with a variable called body_string, which contains HTML markup I\'d like to render, rather than escape.[详细]

2023-03-11 06:13 分类：问答
VB.NET Webbrowser System.UnauthorizedAccessException in Loop

I\'ve had this code working for at least a year and today it threw an exception that i haven\'t been able to figure out why its happening. Its a Forms.WebBrowser that hits a generic site first and the[详细]

2023-03-10 00:57 分类：问答
How to escape JavaScript in an HTML String while keeping the HTML unescaped?

We have a webapplication. At some points there is a JavaScript based WSIWYG / RichText Editor. It filters some JavaScript but uses HTML text to format it\'s content.[详细]

2023-03-09 23:03 分类：问答
For XSS protection, do I need to escape before populating for edit

I have an infected text that I\'m testing with. In display mode, I get the data from the database and display it on the page, and I get the XSS as expected.[详细]

2023-03-09 18:13 分类：问答
Are text editors that use Markdown by detault safer than other text editors

I\'m familiar with CKEditor which converts bold text to its HTML tags <strong>. Other editors (like the editor on this site) use Markdown formatting and I see bold te开发者_高级运维xt wrapped in[详细]

2023-03-09 08:38 分类：问答
Is it unsecure to use $_GET to update the data from database?

Is it unsecure to use $_GET to update/delete the data from MySQL table?? I can\'t use $_POST since it required to use <form> tag[详细]

2023-03-09 05:32 分类：问答
GWT SafeHTML, XSS & Best Practices

The good people of OWASP emphasize that you MUST use the escape syntax for the part of the HTML document you’re putting untrusted data into (body, attribute, JavaScript, CSS, or URL). See OWASP - XSS[详细]

2023-03-09 01:34 分类：问答