Posted by Chung Leong on 03/11/06 20:53

Jerry Stuckle wrote:
> And I wasn't interpreting it in the "worst of light". I was
> interpreting it in the light of simple security.
>
> What he's proposing is false security - which is worse than no security
> at all. At least with the latter you know you have potential
> vulnerabilities.

I really don't know what to say. The OP proposed a method for stopping
one type of cross-site scripting attack and here you are insisting that
it's crap because it doesn't stop bots.

[Back to original message]