Re: Preventing cross site scripting

["Tim Greer" <chatmaster () charter net>]

----- Original Message -----
From: "David Cameron" <dcameron () itis-now com>
To: "Bob Lee" <crazybob () crazybob org>; <webappsec () securityfocus com>
Sent: Thursday, June 19, 2003 7:30 PM
Subject: RE: Preventing cross site scripting


You might also want to think about some things that are not likely to
provide xss, but would cause visual problems. Eg <img src=""
width="10000000" height="20000000"> or excessively large/small fonts.

And tables, and fonts, and.. and... :-)

--
Regards,
Tim Greer  chatmaster () charter net
Server administration, security, programming, consulting.