Xss

From Docunext Technology Wiki

This is a malicious hack called Cross Site Scripting, which uses javascript to cause problems on unprotected sites.

When mod_sed is available in the next version of Apache, input filtering will be a lot easier. In the mean time, mod_perl can provide some input filters.

Filters

• http://search.cpan.org/~wross/HTML-TagFilter-1.03/
• http://search.cpan.org/~drtech/HTML-StripScripts-LibXML-0.12/
• http://search.cpan.org/~drtech/HTML-StripScripts-Parser-1.02/
• http://htmlpurifier.org/
• http://pear.php.net/package/HTML_Safe

See Also

• http://www.securityfocus.com/infocus/1768
• http://stackoverflow.com/questions/24723/best-regex-to-catch-xss-attack-in-java
• http://refactormycode.com/codes/333-sanitize-html
• http://wiki.flux-cms.org/display/BLOG/XSS+Prevention