Comments on: A XSS Vulnerability in Almost Every PHP Form I’ve Ever Written

By: pgl

pgl — Tue, 02 Mar 2010 09:17:28 +0000

(Incidentally, if you want a script to post back to itself, it’s easier just to leave out the action=”" part altogether in your tag).

By: pgl

pgl — Tue, 02 Mar 2010 09:16:12 +0000

But… index.php” isn’t a valid URL?

By: Rasmus

Rasmus — Fri, 26 Feb 2010 05:39:45 +0000

Ernest, you just described http://php.net/filter which lets you set a default filter that is applied to all user data.

By: Ernest

Ernest — Wed, 24 Feb 2010 19:46:37 +0000

Yeah, seems like there should be an almost automatic routine to scrub all that “other” user input before it even gets put into the variables. All HTTP headers, cookies… Anything else from the HTTP request you’re tempted to use like user-agent all suffer from the same problem.

By: Josh

Josh — Wed, 24 Feb 2010 13:40:15 +0000

When my application vulnerability scanner found the vulnerability I started searching around in Google and that was the very first page that came up and how I figured out the fix for the issue. Big thanks to Sean for writing that and everyone who commented on it afterward. An excellent blog post.

By: anonymous

anonymous — Wed, 24 Feb 2010 11:14:48 +0000

http://seancoates.com/xss-woes