Skip to content Skip to sidebar Skip to footer
Showing posts with the label Xss

Securely Posting And Then Printing Javascript Tags

I am trying to develop a back-end Ad Checking application in PHP. We have lots of places where ads … Read more Securely Posting And Then Printing Javascript Tags

How Do I Begin With Making A Small Cross-site Ajax Script Using Someone's Api?

Let's say I want to use this API: http://hiveminder.com/help/reference/API.html The instructio… Read more How Do I Begin With Making A Small Cross-site Ajax Script Using Someone's Api?

Can A "new Domparser.parsefromstring" Be Safer Than "createelement"?

I create a script for try remove insecure content (I'm using it for browser extensions): I'… Read more Can A "new Domparser.parsefromstring" Be Safer Than "createelement"?

Sanitize All Scripts From Html String

The HTML5 clipboard is awesome, but I am looking for a way to make it safe. The user is pasting tex… Read more Sanitize All Scripts From Html String

Why Are Ajax Requests Limited To Same Domain?

Something I find really confusing, is why are AJAX requests limited to the same domain? What is th… Read more Why Are Ajax Requests Limited To Same Domain?

How To Safely Run User-supplied Javascript Code Inside The Browser?

Imagine a scenario where I want to continuously invoke user-supplied Javascript code, like in the f… Read more How To Safely Run User-supplied Javascript Code Inside The Browser?

Running A Query And Retrieving Xml From An External Site

I am trying to use Ajax to submit a query to an external database (http://foreignserver:1234/databa… Read more Running A Query And Retrieving Xml From An External Site

Client DOM Open Redirect For Javascript

I'm getting Client DOM Open Redirect security issue on scan for the following piece of code. Th… Read more Client DOM Open Redirect For Javascript