Please look at the Owasp XSS prevention cheat sheet for more information.
Please look at the Owasp XSS prevention cheat sheet for more information.
@benwerd also worth remembering hugely popular video responses on youtube — I think they got canned as part of the “upgrade” to G+ comments though :(
@benwerd also worth remembering hugely popular video responses on youtube — I think they got canned as part of the “upgrade” to G+ comments though :(
Neat project, looking forward to seeing if I can steal/beg/borrow code as it progresses!
BTW - been playing with the complement of your approach - how can a page indicate that it's really "legitimate", regardless of where it's hosted, using gpg as in this post.
I run it as
perl -w ~/personal/kludgemention/kludge.pl http://waterpigs.co.uk/notes/4VjNNc/
And the gist is over here if you're curious.
The Soup Dragon is my spirit animal.
*whistles at you quizzically*
This was taken at Niagara Falls, Canada. They have a cool little walkway under the falls.
This was taken at Niagara Falls, Canada. They have a cool little walkway under the falls.