Re: Securing CF Apps against SQL Injection & Cross Site Scripting

[Andrew Grosset]

When checking the query string I also decode it like this:

#urldecode(cgi.query_string)#

this is to escape any HTML escaped encoding....

---

[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

---