Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: XSS - Double Quote break out and White Space filtered May 29 2009 06:42PM
Florian Weimer (fw deneb enyo de)
* arvind doraiswamy:

> Problem 1:
> Here's what is allowed:
>
> ( ) : ; &

Is "=" allowed as well? Without that, it's going to be difficult, I
think.

With =, you can use an onmouseover event handler and a style attribute
to enlarge the input field and make it transparent (so that the event
handle...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus