Questions tagged [filter]
The filter tag has no usage guidance.
4
questions
0
votes
0answers
14 views
xss filter bypass <>& [duplicate]
i've been trying to bypass an xss filtering system
but i failed to exploit it ,
i've searched alot but couldn't find anything that works
so i thought i should ask u guys
i've entered all the ...
1
vote
1answer
103 views
Why does javascript not show an alert box? [closed]
I'm trying to insert javascript:alert(1) inside tag. There is some kind of filter for javascript, so I tried using javascrip%74:alert(1) and that url is accepted.
However when i click on it it ...
2
votes
1answer
258 views
Are unescaped backslashes dangerous in terms of XSS?
I thought the \ (backslash) character was a dangerous character that you needed to filter out/properly encode to protect against XSS attacks (OWASP says so, too), and I still do, but why?
I found a ...
2
votes
0answers
74 views
Disable php://filter globally or per php file
Local/Remote File Inclusion is a serious vulnerability. Best practice to protect against it is to set in php.ini:
allow_url_fopen = Off
allow_url_include = Off
open_basedir = /var/www/html
Clearly, ...
