Re: Preventing cross site scripting

• Original Message ----- From: "David Cameron" <dcameron@itis-now.com> To: "Bob Lee" <crazybob@crazybob.org>; <webappsec@securityfocus.com> Sent: Thursday, June 19, 2003 7:30 PM Subject: RE: Preventing cross site scripting

You might also want to think about some things that are not likely to provide xss, but would cause visual problems. Eg <img src="" width="10000000" height="20000000"> or excessively large/small fonts.

And tables, and fonts, and.. and... :-)

--

Regards,
Tim Greer chatmaster@charter.net
Server administration, security, programming, consulting. Received on Thu Jun 19 23:23:07 2003