On Fri, 2006-10-06 at 18:48 +0200, Hendrik Van Belleghem wrote: > "mock" talked about XSS at this years YAPC::Europe in Birmingham a few > weeks ago. He had quite a few examples. His slides are at > http://sketchfactory.com/static/mvc.pdf (More Vulnerable Code). > It goes without saying that it would be a bit unwise to test the URLs > mentioned in the talk. He briefly mentions HTML::Scrubber in there. I am using HTML::Stripscripts::Parser, which also makes sure that tags are nested properly. Anybody have any view on these (or other) modules? Clint
Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.