Open Source XSS Prevention Script [closed]
We don’t allow questions seeking recommendations for books, tools, software libraries, and more. You can edit the question so it can be answered with facts and citations.
Closed 7 years ago.
开发者_开发百科 Improve this questionI am looking for damn good open source XSS prevention script to implement in my php mvc framework.
Any ideas?
Its not quite what you are asking for, but check out: http://code.google.com/p/owasp-esapi-php/
You might check out the AntiSamy project, managed by the Open Web Application Security Project (OWASP).
It's named AntiSamy after Samy Kamkar, creator of the MySpace worm.
http://www.owasp.org/index.php/Category:OWASP_AntiSamy_Project
Although this is not for PHP it could at least give you some ideas for writing your own code. I suppose PHP has the same built in functions to validate/parse URL, encode HTML, etc ... See if that helps you at all ....
精彩评论