Posted by Tim Van Wassenhove on 12/17/05 22:50

On 2005-12-17, Christian Decker <Decker.Christian@gmail.com> wrote:
> Hi,
>
> I'm trying to figure out how my users may use (or better misuse) the
> input fields of my site to to insert JavaScript. I'm already replacing
> all occurencies of "script" in every input field but I wanted to know
> if anybody here ever stumbled upon a trick to disguise the <script>
> tag?

Just search the web for a XSS cheat sheet...

--
Met vriendelijke groeten,
Tim Van Wassenhove <http://timvw.madoka.be>

[Back to original message]