18
edits
Security/Features/XSS Filter: Difference between revisions
no edit summary
No edit summary |
No edit summary |
||
| Line 75: | Line 75: | ||
*This feature will not stop persistent or injected XSS attacks (only reflected ones). | *This feature will not stop persistent or injected XSS attacks (only reflected ones). | ||
*The filter will not be able to deal with complex string transformations employed by web applications. In this case, it will fail to recognize that | *The filter will not be able to deal with complex string transformations employed by web applications. In this case, it will fail to recognize that the script was provided by an input parameter and allow it to run. | ||
== Other Stuff == | == Other Stuff == | ||