Re: preventing XSS and SQL injection?

["Marcus J. Ranum" <mjr () ranum com>]

ArkanoiD wrote:
> Are there any hints on preventing cross-site scripting attacks and
> SQL injection on proxy firewall by, say, applying some regexps on url data?

Instead of trying to block what is bad, permit only what is good.

Can you observe your legitimate traffic and converge forward
on a set of regexps that define what "good" looks like? Then
deny all else. You might be able to do that in a fairly straightforward
manner using Squid proxy cache ACLs.

mjr.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards