Welcome Guest, Not a member yet? Register   Sign In
Does anyone know of an instance where the default XSS filter included with CodeIgniter has failed?
#1

[eluser]timtocci[/eluser]
I've used HTMLPurifier with other (non codeigniter) projects and had great results. Thing is that HTMLPurifier has a big overhead. Since CodeIgniter has a filtering built in I've never thought about using anything else. Recently, I've noticed a few wiki entries about using the HTMLPurifier system with CodeIgniter. That's why I ask the question: Does anyone know of an instance where the default XSS filter included with CodeIgniter has failed? And if so, where and under what conditions?
#2

[eluser]CroNiX[/eluser]
Never heard of it happening, but I'm interested if others have as well.
#3

[eluser]InsiteFX[/eluser]
I never have!
#4

[eluser]PhilTem[/eluser]
I never had any problems with the CI XSS-filter. But what exactly do you mean with 'has failed'? Failed by filtering too much or by filter too less? Just curious Wink

If anybody else had failed experiences with CI's XSS-filter, I'd like to hear, too Wink




Theme © iAndrew 2016 - Forum software by © MyBB