Samy opens new front in worm war

TalkBack 2 of 2:

« Previous

• Thread View
• Flat View

XSS

Another example of lack of input validation. Whether a website, application, or database, if user input is not filtered and validated i.e. allow filter [A-Za-z0-9], you are just asking for a compromise down the road. If you must allow alternative characters, then deny filter bad things i.e. </script>.

Curt Purdy
Information Security Officer
purdy@tecman.com

Posted by: purdy@...   Posted on: 10/25/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Infrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now