Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: Existing XSS filters

Existing XSS filters

From: Ulf Harnhammar <metaur_at_operamail.com>
Date: Fri, 20 Jun 2003 19:50:18 +0100

Here are the existing stand-alone open-source XSS filters that I know of:

kses (me, Ulf Harnhammar)
PHP
http://sourceforge.net/projects/kses

XSS filter for PHP4 - the filter from Squirrelmail (Konstantin Riabitsev)
PHP
http://www.mricon.com/html/phpfilter.html

HTML::StripScripts and related CPAN modules (Nick Cleaton)
Perl
http://search.cpan.org/author/NCLEATON/HTML-StripScripts-0.01/StripScripts.pm

There are also a lot of people who's written some kind of XSS filter specifically for their project. Some of them are better than others.

Please reply if you know about any other stand-alone, open-source filters.

// Ulf Harnhammar

-- 
____________________________________________
http://www.operamail.com
Get OperaMail Premium today - USD 29.99/year
Powered by Outblaze
Received on Jun 20 2003
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos