note 58009 added to function.strip-tags
| From: | php-general at lists dot php dot net | Date: | Fri, 21 Oct 2005 14:29:57 +0000 |
| Subject: | note 58009 added to function.strip-tags | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-97351@lists.php.net to get a copy of this message | ||
One easy way to avoid some XSS attacks would be to limit the size of the text whitin the allowed
html tags. This could prevent some very clever tricks that can be made to overpass various security
measures.
Look at this link, where it is explained how a well known web site was attacked, despite that they
dont allowed a very large list of attibutes whitin tags.
http://namb.la/popular/tech.html
----
Manual Page -- http://www.php.net/manual/en/function.strip-tags.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+58009
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes&reason=non-english
Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes&reason=already+in+docs
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+58009&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+58009&report=yes
Search -- http://master.php.net/manage/user-notes.php