Re: Extended ASCII characters used for injection

[john s <rwnin.security () gmail com>]

<snip>
> You'd be blocking legitimate usage of many different character encodings
> including UTF-8 and ISO-8859-1 if you blocked 0x77 - 0xff.
</snip>

<snip>
> What platform are you using? It really makes a difference in how Unicode
> is handled.
</snip>


Doesn't this issue really boil down to the requirements of a given
application?

Just because some applications require extended character sets, does
that mean every web server implementation needs to support them all?



This list is sponsored by Cenzic
--------------------------------------
Let Us Hack You. Before Hackers Do!
It's Finally Here - The Cenzic Website HealthCheck. FREE.
Request Yours Now! 
http://www.cenzic.com/2009HClaunch_Securityfocus
--------------------------------------