Skip to content Skip to sidebar Skip to footer
Showing posts with the label Xss

Display Javascript "same Origin Policy" Violations

I'm developing a mobile app which runs a simple HTTP server and a WebView. The WebView displays… Read more Display Javascript "same Origin Policy" Violations

Prevent Javascript Get And Script

Is there anyway to limit Javascript Get, Post request to a specified domain? Also can I somehow dis… Read more Prevent Javascript Get And Script

Is It Possible To Detect The User Click Event In The Popup Window?

I can detect the user click event in the popup window if the current url and popup url is in same d… Read more Is It Possible To Detect The User Click Event In The Popup Window?

How To Safely Run User-supplied Javascript Code Inside The Browser?

Imagine a scenario where I want to continuously invoke user-supplied Javascript code, like in the f… Read more How To Safely Run User-supplied Javascript Code Inside The Browser?

Sanitize All Scripts From Html String

The HTML5 clipboard is awesome, but I am looking for a way to make it safe. The user is pasting tex… Read more Sanitize All Scripts From Html String

Why Are Cross-domain Ajax Requests Labelled As A "security Risk"?

By default, browsers don't allow cross-site AJAX requests. I understand that a badly envisioned… Read more Why Are Cross-domain Ajax Requests Labelled As A "security Risk"?

Ajax Response Return Html Response (xss Veracode)

function viewAcc() { var errorMsg = ''; var result = true; $('.errorView… Read more Ajax Response Return Html Response (xss Veracode)

Filtering Javascript Out Of Html

I have a rich text editor that passes HTML to the server. That HTML is then displayed to other user… Read more Filtering Javascript Out Of Html