Re: stripping HTML, SQL injections ... - Mailing list pgsql-general

From Ottavio Campana
Subject Re: stripping HTML, SQL injections ...
Date
Msg-id 473C0D7B.40606@campana.vi.it
Whole thread Raw
In response to Re: stripping HTML, SQL injections ...  (Alvaro Herrera <alvherre@alvh.no-ip.org>)
List pgsql-general
Alvaro Herrera ha scritto:
> Martin Gainty escribió:
>> this is a very simple html tag strip routine
>> I dont understand what security you had in mind ..
>>
>> so I take it you're not a fan of dojo or GWT?
>
> Let's say the user disables javascript on the browser?

or more easily, an attacker can use the firefox web developer toolbar to
manipulate forms data...

--
Non c'e' piu' forza nella normalita', c'e' solo monotonia.


Attachment

pgsql-general by date:

Previous
From: "சிவகுமார் மா"
Date:
Subject: Enforcing Join condition
Next
From: "Abraham, Danny"
Date:
Subject: Chunk Delete