Re: Gzipped output
| From: | Michael McGlothlin | Date: | Sat, 16 Feb 2008 21:11:51 +0000 |
| Subject: | Re: Gzipped output | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-269417@lists.php.net to get a copy of this message | ||
That'd stop a lot of XSS issues and it'd force developers to write better code. -- Michael McGlothlin Southwest Plumbing SupplyLet us look at XSS now. http://sla.ckers.org/forum/list.php?2 Looks like there are quite a few of those too. If Google/Yahoo can't stop this stuff how are us mere mortals supposed to?In my experience, the bigger the organisation, the more mere mortals. Also, a small team has a much better of chance of getting things right than a big team What needs to happen, IMO, is for the browser manufacturers to create a way for users and website programmers to disable scripting in the web page body on a per site or per page basis. Why not be able to supply a meta tag that will only let scripting be attached in the head portion of the page and only from a file. Perfect use for Javascript behaviors to attach code to what's in the page body.
Attachment: [application/x-pkcs7-signature] S/MIME Cryptographic Signature smime.p7s