Re: Preventing user input script-injection attacks

2010-11-29 Thread Ian Marshall
also be having a play with that package to see what else is there! Regards, Ian -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3064004.html Sent from the Users forum mailing list archive at Nabble.com

Re: Preventing user input script-injection attacks

2010-11-26 Thread Ian Marshall
to hearing any views, Ian -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3060397.html Sent from the Users forum mailing list archive at Nabble.com

Re: Preventing user input script-injection attacks

2010-11-26 Thread Igor Vaynberg
views, Ian -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3060397.html Sent from the Users forum mailing list archive at Nabble.com

Preventing user input script-injection attacks

2010-11-25 Thread Ian Marshall
this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3059119.html Sent from the Users forum mailing list archive at Nabble.com. - To unsubscribe, e-mail

Re: Preventing user input script-injection attacks

2010-11-25 Thread Martin Makundi
://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3059119.html Sent from the Users forum mailing list archive at Nabble.com. - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org

Re: Preventing user input script-injection attacks

2010-11-25 Thread Patrick Petermair
Am 2010-11-25 16:15, schrieb Ian Marshall: If a user has entered some HTML in a TextField or TextAreaString when I do not want HTML to be entered, what is a good way to prevent this? In our project we are using OWASP Antisamy to prevent XSS attacks. It is easy to use, has a couple templates

Re: Preventing user input script-injection attacks

2010-11-25 Thread Ian Marshall
injected into future rendered HTML by user input. -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3059321.html Sent from the Users forum mailing list archive at Nabble.com

Re: Preventing user input script-injection attacks

2010-11-25 Thread Ian Marshall
Thanks for that, Patrick. I'll take a look at these tomorrow to see what they have got. -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script-injection-attacks-tp3059119p3059322.html Sent from the Users forum mailing list archive at Nabble.com

Re: Preventing user input script-injection attacks

2010-11-25 Thread Igor Vaynberg
to coding a method to examine the models of my TextField and TextAreaString components at form-submission-time and remove any HTML code manually? Any comments would be appreciated, Ian -- View this message in context: http://apache-wicket.1842946.n4.nabble.com/Preventing-user-input-script

Re: Preventing user input script-injection attacks

2010-11-25 Thread Michał Letyński
You can also try to use: http://nekohtml.sourceforge.net/ W dniu 2010-11-25 18:39, Ian Marshall pisze: Thanks for that, Patrick. I'll take a look at these tomorrow to see what they have got. - To unsubscribe, e-mail: