on 6/10/02 3:18 AM, "Jeff Schnitzer" <[EMAIL PROTECTED]> wrote:

> How many people writing webapps have a good understanding of
> cross-site-scripting vulnerabilities?  Relatively few, I would guess.
> I'm willing to bet that most of the existing sites using velocity have
> such problems.

Scarab uses an EventCartridge to do this and is imune to CSS attacks.

;-)

-jon


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to