Jan21, 2009

XSS Prevention Cheat Sheet

Those of you interested in coding and programing — specifically those of you who are dabbling with releasing your own scripts — are probably already aware of my lengthy rambles on sanitising input data, not trusting anything, etc etc. However, where I leave you to discover the nuances of individual language security on your own, OWASP (Open Web Application Security Project) have gone straight to the core of one of the biggest security threats to online applications and scripts: XSS

I heartily recommend reading, digesting, favouriting and then re-reading the XSS (Cross Site Scripting) Prevention Cheat Sheet.

It's either that, or you risk ending up on the milw0rm web apps exploits/vulns list. (Talking of which... any of you running Dodo's Quiz might want to read this advisory; but then I have warned you all of the dangers of Dodo's scripts before.)

9

Tagged , and .

Comments

There are currently 9 approved responses to "XSS Prevention Cheat Sheet".

  1. [gravatar]

    Aisling 21/01/09 at 22:55 #

    ... before I can prevent XSS, how do I find out what it is? :P

  2. [gravatar]

    Jem 21/01/09 at 22:58 #

    Click the word XSS in the linked article..?

  3. [gravatar]

    Aisling 21/01/09 at 23:02 #

    ... so much work. :(

  4. [gravatar]

    Vasili 21/01/09 at 23:36 #

    Hopefully I'll have time to read this (again) over the weekend. I know I have a PDF of XSS prevention somewhere on my computer...

  5. [gravatar]

    Kachii 22/01/09 at 00:03 #

    My friend started writing a browser based RPG recently and has very little experience of programming (but a willingness to learn) and it's amazing how things like that don't seem to cross a novice's brain. I broke her page within minutes.

    Anyway, things like that are why I don't even want to release my own scripts to the public. I fear exploitation through my own negligence.

  6. [gravatar]

    Ben 22/01/09 at 08:54 #

    Cheers for this Jem. I will surely have a good read of this tonight :)

  7. [gravatar]

    Chans 22/01/09 at 09:31 #

    I can't code well so I don't try it but this is a good read to keep in mind when I actually decide to try and code or program (if I ever will)

  8. Mumblies   22/01/09 at 12:56 #

    Meh! :)

  9. [gravatar]

    Stephanie 22/01/09 at 20:06 #

    I'm with your mum on this one :P

Comments are closed.