Welcome to the IBM Collaboration Solutions Community IQJam
UsernamePassword
Reset Password | Register
   
 Home | Tags | Help
There are 194 questions | 427 answers | 120 unanswered questions
Cross Site Scripting attacks 
How can I prevent XSS in my XPages sites?
Domino Development / XPages
Tagged
Matt White - over 4 years ago |  |  | Viewed 171 times
Voting
Vote on the question to show whether you think it is important that it be answered.

Questions with more votes are more visible to the rest of the community

There are 8 answers

0votes
According to the Help file, if you set the HTMLFilter property of Rich Text Controls with the ACF property then it should prevent any "naughty" tags such as <script> etc getting displayed out to the browser. Let's see what you lot can do ;-)
Matt White - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
0votes
Hacking away...
Jeremy Hodge - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
0votes
Couldn't embed a script directly ... how about a link...

Jeremy Hodge - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
0votes
pwnd!
Jeremy Hodge - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
0votes
Jeremy Hodge - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
1votes
Looks good!  i can't seem to pwn you....
Jeremy Hodge - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
0votes
Thanks for the tries Jeremy. Good to know that it's all built into DDE. Just need to know where to look.

I wonder whether that should be enabled by default?
Matt White - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community
1votes
I really think it should be. You know most developers are going to not think about the possibility of an attack like that until after it happens...
Jeremy Hodge - over 4 years ago | 
Voting
Vote on the answer to show whether you think the answer is correct or useful to the rest of the community.

Answers with more votes are more visible to the rest of the community

Latest Answers for Domino Development / XPages 

How to call LS agent in xpage
Vijay Kumar - 6 months ago
Multi-values in an xPage view panel column
Judy Kilpinen - 7 months ago
RichText field with default value doesn't save the data to the document.
Martin Meijer - about 1 year ago
From CSJS refresh a panel dijit.TooltipDialog
daniele grillo - about 1 year ago
How to get value from Repeater Control.
Atul Saxena - about 1 year ago
doing a partial update "beforepageload"
jeroen somhorst - about 1 year ago
How to get value from Repeater Control.
jeroen somhorst - about 1 year ago
How to get value from Repeater Control.
Mervin Thomas - about 1 year ago
Where Would I Delete My Cookie?
Lenni Sauve - over 2 years ago
Query_String value empty with agent URL from xpage
Andy Cunliffe - over 2 years ago
Query_String value empty with agent URL from xpage
Matt White - over 2 years ago
Query_String value empty with agent URL from xpage
Ben Poole - over 2 years ago
textfield formatting
Ben Poole - over 2 years ago
File Upload/File Download using Managed Beans
Toby Samples - over 2 years ago
File Upload/File Download using Managed Beans
Andy Cunliffe - over 2 years ago

Experts for Domino Development / XPages

There are no experts to display