[pLog-svn] XSS remover
mark.wu at markplace.net
Thu Jan 10 02:51:57 EST 2008
More information here:
From: Mark Wu [mailto:mark.wu at markplace.net]
Sent: Thursday, January 10, 2008 3:51 PM
To: 'LifeType Developer List'
Subject: XSS remover
Instead of using the big HTML parser like HTMLPurifier, I think we can use
the samll library like this one:
to remove the XSS attack. It is better then just remove <script>xxx</script>
So, we have another alternative solution ~
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the pLog-svn