Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Microsoft Makes More Moves to Software as a Service | Main | Google/Doubleclick Deal: Control Your Own Privacy with Anonymizers »

Ways to Avoid Cross Site Scripting Attacks

We've just posted a new article in the Messaging and Web Security library entitled Web Developers Guide to Avoiding Cross Site Scripting Attacks. You can download it here.

If you're a Web developer you've probably heard about cross site scripting attacks (XSS) but here is a concise discussion of methods to reduce the risk of such attacks in your applications. The article discusses the advantages and disadvantages of allow-in filtering and keep-out filtering and provide a good starting point for developers getting started with understanding and addressing this threat.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/455

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net