The tag has no wiki summary.

learn more… | top users | synonyms

6
votes
1answer
213 views

White list or black list sanitation for international input?

There seem to be so many ways to create nefarious input that white-listing what input is good usually feels like the safer, simpler option. For instance, one can fairly easily craft a white list ...
4
votes
5answers
961 views

XSS : Blacklist characters vs. whitelist

I have been studying to prevent my web app against XSS. I read about it on OWASP and other security channels, they all say that use ESAPI and similar library, and also do input filtering through ...
4
votes
1answer
147 views

How to whitelist an Amazon ELB in a(ny) firewall?

We have a customer with a very locked-down network. Any outbound connections require whitelisting of the port and IP address. However, we are running our system behind an Amazon Elastic Load Balancer ...
3
votes
3answers
269 views

Protecting websites from outdated browsers and plugins via a whitelist/blacklist combination?

Aside from using browser headers, I want to blacklist/whitelist browser and plugins from my site so that I can prevent these older unpatched systems from (1) being a general user of my site (2) ...
2
votes
3answers
133 views

State before getting whitelisted?

There is a data flow of incoming files (from untrusted, external sources), that get whitelisted by a kind of application layer firewall. Is there a common name for the state of the files before they ...
-1
votes
1answer
70 views

Is there a tool I can use to see if my website is being blocked by common business content filters? [closed]

Not 100% sure this is the right site, but hey-ho, Title sums it up, I'm getting sporadic reports from a couple of clients that people visiting bits of their sites are being blocked with a message ...