Questions tagged [filter]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

xss filter bypass <>& [duplicate]

i've been trying to bypass an xss filtering system but i failed to exploit it , i've searched alot but couldn't find anything that works so i thought i should ask u guys i've entered all the ...
1
vote
1answer
103 views

Why does javascript not show an alert box? [closed]

I'm trying to insert javascript:alert(1) inside tag. There is some kind of filter for javascript, so I tried using javascrip%74:alert(1) and that url is accepted. However when i click on it it ...
2
votes
1answer
258 views

Are unescaped backslashes dangerous in terms of XSS?

I thought the \ (backslash) character was a dangerous character that you needed to filter out/properly encode to protect against XSS attacks (OWASP says so, too), and I still do, but why? I found a ...
2
votes
0answers
74 views

Disable php://filter globally or per php file

Local/Remote File Inclusion is a serious vulnerability. Best practice to protect against it is to set in php.ini: allow_url_fopen = Off allow_url_include = Off open_basedir = /var/www/html Clearly, ...