Web Application Security
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Re: XSS - Double Quote break out and White Space filtered
May 29 2009 06:42PM
Florian Weimer (fw deneb enyo de)
* arvind doraiswamy:
> Problem 1:
> Here's what is allowed:
>
> ( ) : ; &
Is "=" allowed as well? Without that, it's going to be difficult, I
think.
With =, you can use an onmouseover event handler and a style attribute
to enlarge the input field and make it transparent (so that the event
handle...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
> Problem 1:
> Here's what is allowed:
>
> ( ) : ; &
Is "=" allowed as well? Without that, it's going to be difficult, I
think.
With =, you can use an onmouseover event handler and a style attribute
to enlarge the input field and make it transparent (so that the event
handle...
[ more ]