[Plugins-writers] Detecting XSS in script parameters

From: Paul Johnston (paul@private)
Date: Wed Aug 04 2004 - 01:50:25 PDT


Hi,

I notice there is no plugin that checks for XSS in all of a forms 
parameters, in the way wpoison.nasl checks for SQL injection. I am 
planning to develop such a plugin and wondered if anyone had any 
thoughts on the matter before I do so.

Regards,

Paul

-- 
Paul Johnston
Internet Security Specialist
Westpoint Limited
Albion Wharf, 19 Albion Street,
Manchester, M1 5LN
England
Tel: +44 (0)161 237 1028
Fax: +44 (0)161 237 1031
email: paul@private
web: www.westpoint.ltd.uk


_______________________________________________
Plugins-writers mailing list
Plugins-writers@private
http://mail.nessus.org/mailman/listinfo/plugins-writers



This archive was generated by hypermail 2.1.3 : Wed Aug 04 2004 - 01:56:26 PDT