- In: Computing | Security
- Leave a Comment
Some of the good sites explaining Cross-Site Scripting:
- Preventing XSS Attack
- XSS Protect, a project hosted on Google code.
- For the entire Spring MVC app , you can specify the escaping in the web.xml:
<context-param> <param-name>defaultHtmlEscape</param-name> <param-value>true</param-value> </context-param>But then the escaping applies only to the
springtags , like :<form:input path="formField" htmlEscape="true" /> - Manual testing for XSS
- A good test string is
>'>"><img src=x onerror=alert(0)>. - If your application doesn’t correctly escape this string, you will see an alert and will know that something went wrong.
- Wherever your application handles user-supplied URLs, enter
javascript:alert(0)ordata:text/html,alert(0).
- A good test string is
Little Nobel
Lorna Whiston Study Centres
Tadika Vista Cemerlang
Tweedle Wink
Yamaha Music School
宝贝阅读乐园
愛心樹家庭成長中心Loving Tree Family Development Center
BrillKids Free Download
British Council Learn English Kids
Global Chinese Language and Culture Center
Learn_Chinese_Everyday
My_favourite_Chinese_Online_Dictionary
8notes.com_Music_Theory
No_Time_For_Flash_Cards
Scholastic Book Club Malaysia
Life long sharing . . . 