need to allow all characters in the URI... what should i be aware of

need to allow all characters in the URI... what should i be aware of

El Forum
Unregistered

12-30-2007, 12:12 AM

[eluser]Derek Allard[/eluser]
The url can be used to pass characters that could be used in cross site scripting attacks, or cross site request forgery, or sql injection (in theory). I'd encourage you to find another route around allowing all characters.

Messages In This Thread

need to allow all characters in the URI... what should i be aware of - by El Forum - 12-29-2007, 08:49 PM

need to allow all characters in the URI... what should i be aware of - by El Forum - 12-30-2007, 12:12 AM

need to allow all characters in the URI... what should i be aware of - by El Forum - 12-30-2007, 07:35 AM

need to allow all characters in the URI... what should i be aware of - by El Forum - 12-30-2007, 11:09 AM

need to allow all characters in the URI... what should i be aware of - by El Forum - 12-30-2007, 11:59 AM

need to allow all characters in the URI... what should i be aware of - by El Forum - 12-30-2007, 12:49 PM