avoiding script injection and other lessons

re: avoiding script injection and other lessons

José Jeria — Sat, 07 Feb 2004 12:31:00 GMT

How about updating (easily done) the code so it also works in Mozilla and other browsers with great DOM support?

re: avoiding script injection and other lessons

Raymond Chen — Sun, 08 Feb 2004 07:13:00 GMT

Example of social engineering attack: The "Do you want to make 'XYZ' your new home page?" prompt used to allow you to embed newlines into 'XYZ', thereby enabling such misleading dialogs as

Do you want to make 'http://

CLICK
YES
TO
CONTINUE

@hackersite.com' your new home page?

[Yes] [No]

Take Outs: The Digital Doggy Bag of Blog Bits for 9 February 2004

Enjoy Every Sandwich — Tue, 10 Feb 2004 06:49:00 GMT

The daily list of stuff I found interesting while blogreading.

re: avoiding script injection and other lessons

Stefan Demetz — Tue, 10 Feb 2004 12:35:00 GMT

http://dotnetjunkies.com/WebLog/stefandemetz/archive/2004/02/06/6748.aspx

re: avoiding script injection and other lessons

stefan demetz — Sat, 10 Jul 2004 14:10:00 GMT

Lobby MS to eliminate SQL injection
http://dotnetjunkies.com/WebLog/stefandemetz/archive/2004/07/10/18763.aspx

jeff s WebLog avoiding script injection and other lessons | low cost car insurance

Wed, 17 Jun 2009 07:19:22 GMT

PingBack from http://lowcostcarinsurances.info/story.php?id=3457