Hi, I just signed up with HackerSafe to scan one of my sites. Well I have Cross Site Scripting Vunerability on some of my pages. IE: Login, adding a new customer, adding billing and shipping info, etc. Any page that has a form on it. I have researched the Witango forum and didn't find anything, but I might have used the incorrect search criteria. It appears that the solutions are the following: 1) Don't allow any html tags 2) Don't allow any quotes 3) Don't allow any parenthesis So it looks like I need to filter each field (argument) for the above and remove it. I would appreciate any info, filters, etc that anyone could provide. Thanks in advance. Steve Fogelson Internet Commerce Solutions ________________________________________________________________________ TO UNSUBSCRIBE: Go to http://www.witango.com/developer/maillist.taf
