Web Application Security
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
XSS - Double Quote break out and White Space filtered
May 28 2009 06:13AM
arvind doraiswamy (arvind doraiswamy gmail com)
Hey Guys,
We're trying to understand XSS Regex and evasion techniques better.
We're stuck at 2 variations though.
Problem 1:
Here's what is allowed:
( ) : ; &
Everything else is filtered or replaced. The HTML looks like this:
<input type=text name=p1 size=50 value=>
Note that the value isn't enc...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
We're trying to understand XSS Regex and evasion techniques better.
We're stuck at 2 variations though.
Problem 1:
Here's what is allowed:
( ) : ; &
Everything else is filtered or replaced. The HTML looks like this:
<input type=text name=p1 size=50 value=>
Note that the value isn't enc...
[ more ]