Google has announced the open source release of one of their internal security tools "ratproxy". The proxy analyzes problems such as cross-site script inclusion threats, insufficient cross-site request forgery defenses, caching issues, cross-site scriptin
HTML Purifier is a standards-compliant HTML filter library written in PHP. HTML Purifier will not only remove all malicious code (better known as XSS) with a thoroughly audited, secure yet permissive whitelist, it will also make sure your documents are st
Cross Site Scripting (XSS) is a major security issue facing developers. A new project on OWASP known as the "AntiSamy" project, aims to offer a comprehensive, policy driven, API that validates and sanitizes input, as well as providing user feedback on the
In this article, we've presented different types of regular expression signatures that can be used to detect SQL Injection and Cross Site Scripting attacks
The following article will try to help beginners with grasping the problems facing them while trying to utilize SQL Injection techniques, to successfully utilize them, and to protect themselves from such attacks.
Microsoft just released a new Anti-XSS tool that works with .NET Framework 1.0, 1.1 and 2.0. It follows an Accept-only approach in which this tool looks for a finite set of valid input and everything else is considered invalid.
Google fixes cross-site scripting bug
