WebApp Sec: RE: Content monitorting in Application Security

["Security" <Security () mujica com>]

Just have your virus engine monitor this folder and scan the files as
they are created.

I can't really think of any other way of doing it...

Hope this helps,

Alberto Mujica 

-----Original Message-----
From: Alfred Hitchcock [mailto:alfredhitchcock_007 () yahoo com] 
Posted At: Friday, January 07, 2005 7:56 AM
Posted To: Security
Conversation: Content monitorting in Application Security
Subject: Content monitorting in Application Security




Hi All,

I have a major doubt it would be of great help if anybody can provide
solution to this.

I have a web page which allows to upload files such as jpeg and html
files.

Is there any mechanisms which can detect malicious html files. E.g. if a
html page has got a malicious java script such as alert('xss') then how
can we check these things. One more point to be noted here is that
uploading of file can be done by any user.