Security in post/get

Register Sign In

Security in post/get

05-11-2009, 07:10 PM

[eluser]Thorpe Obazee[/eluser]
Do you mean you tested writing:

Code:
script alert(“hello”) /script

Code:
&lt;script&gt; alert(“hello”) &lt;/script&gt;

?

EDIT: I actually tried it and it didn't work as the xss filter would replace the word '<script>' and '</script>' with '[removed]'

Messages In This Thread

Security in post/get - by El Forum - 05-11-2009, 03:53 PM

Security in post/get - by El Forum - 05-11-2009, 07:10 PM