|
Posted by David Dorward on 11/15/51 11:28
adyda wrote:
> Now, I'm developing a procedure to do this, but I need to know which tags
> I need to remove from incoming data to be sure that no malicious code can
> be uploaded into my website
You would be better off working from the other direction. Decide what tags
(and what attributes on those tags) that you want to *allow* and drop
everything else. Aside from anything else, its proof against any future
extensions (official or (more likely) otherwise) to HTML that may be
introduced.
--
David Dorward <http://blog.dorward.me.uk/> <http://dorward.me.uk/>
Home is where the ~/.bashrc is
Navigation:
[Reply to this message]
|