note 58009 deleted from function.strip-tags by betz
| From: | betz@php.net | Date: | Fri, 21 Oct 2005 15:34:58 +0000 |
| Subject: | note 58009 deleted from function.strip-tags by betz | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-97354@lists.php.net to get a copy of this message | ||
Note Submitter:
----
One easy way to avoid some XSS attacks would be to limit the size of the text whitin the allowed
html tags. This could prevent some very clever tricks that can be made to overpass various security
measures.
Look at this link, where it is explained how a well known web site was attacked, despite that they
dont allowed a very large list of attibutes whitin tags.
http://namb.la/popular/tech.html