Re: Preventing cross site scripting

["Tim Greer" <chatmaster () charter net>]

----- Original Message -----
From: "Bob Lee" <crazybob () crazybob org>
To: <webappsec () securityfocus com>
Sent: Thursday, June 19, 2003 7:19 PM
Subject: Re: Preventing cross site scripting


> You can also embed javascript in seemingly harmless tags such as "img"
> and in event handlers, such as "onload".

if you blindly accept whatever is passed, yes. However, don't, and it's not
an issue. :-)
--
Regards,
Tim Greer  chatmaster () charter net
Server administration, security, programming, consulting.