The Web Application Security Consortium is pleased to announce the first 
results 
of the Script Mapping project! At this stage in the project we were able to 
cover
most of the test cases for Internet Explorer 7, Firefox 2 and Safari 3.

The results can be found on the project page:
http://www.webappsec.org/projects/scriptmapping/

Project Description:

The purpose of the Script Mapping Project is to come up with an exhaustive list 
of vectors to execute script within a web page without the explicit use of 
<script> 
tags. This data can be useful when testing poorly implemented Cross-site 
Scripting 
blacklist filters, for those wishing to build an html white list system, as 
well as 
other uses.

WASC is actively seeking volunteers from various sections of the community 
including 
penetration testers, security researchers, and developers to contribute to this 
project.

If you would like to be involved with the project or if you have comments about 
the
results, test cases etc., please contact Romain Gaucher ( [EMAIL PROTECTED])

Regards,

- Announcements

----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]
_______________________________________________
Secure Coding mailing list (SC-L) SC-L@securecoding.org
List information, subscriptions, etc - http://krvw.com/mailman/listinfo/sc-l
List charter available at - http://www.securecoding.org/list/charter.php
SC-L is hosted and moderated by KRvW Associates, LLC (http://www.KRvW.com)
as a free, non-commercial service to the software security community.
_______________________________________________

Reply via email to