PEAK XOOPS - anti-XSS system (1) in englishin japanese

Archive | RSS |
PHP
PHP : anti-XSS system (1)
Poster : GIJOE on 2006-06-20 13:16:00 (13335 reads)

in englishin japanese
I've found much better anti-XSS system like "Big umbrella".

1. check doubtful request (eg. "<script") in the top of application
2. if such requests exist, push an output filter by ob_start()
3. else no ob_start() are pushed (=performance safe)
4. check registered doubtful-requests exist in the html for outputting
5. if exist, die().

I'll write the code in (2)

0 comments

Related articles
Printer friendly page Send this story to a friend

Comments list

Login
Username or e-mail:

Password:

Remember Me

Lost Password?

Register now!