RE: HTMLEditFormat and Cross Site Scripting

2010-08-27 Thread cindi . gannon
from executing. select * from t_s1 u, t_s2 x where id = '#htmleditformat(form.logname)#' and u.id = x.id ________ Cindi Gannon, Sr Programmer Analyst ? The Bank of New York Mellon Corpora

HTMLEditFormat and Cross Site Scripting

2010-08-27 Thread cindi gannon
New to the cross site scripting arena - trying to prevent users from entering javascript into form fields and the javascript from executing. Pretty much anything goes in the form fields - so I am trying to add htmleditformat to my code - but the javascript is still executing when I click submit