Tagged Questions
7
votes
2answers
376 views
Drupal filters XSS with regexes. What could bypass it?
Drupal filters HTML strings against XSS attacks using regexes: http://api.drupal.org/api/drupal/includes%21common.inc/function/filter_xss/7
However, as a lot of people know, HTML can't be parsed with ...