Whatever is input is sent to the server and returned later as xml which is translated with xsl like this:
<input type="text" ...>
<xsl:value-of select="..."/>
</input>
So anything in that user value is put in here which I'm guessing means we need to test for more than just <script> tags?
Hi,
Does anyone know whether it's possible to detect whether a user has put some form of script in a text input? Basically we need to stop people inputting something like "<script>alert(document.cookie)</script>" into an input as when this is returned from the server in xml form it is causing...
Thanks Smah,
I've already added it to trusted sites and enabled all of the zone properties (e.g. Allow ActiveX) so I don't think it's that that's causing the problem.
I have a problem where I can't logon to the users current Outlook session through Internet Explorer 6. I've got the following test script:
email = new ActiveXObject( "MAPI.SESSION" );
email.Logon( "", "", false, false );
alert (email.CurrentUser);
I have tried running the same code...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.