Hot answers tagged

2 votes
Accepted

Can you add to the restricted tags filter for security in EE to secure the application further?

I too have been faced with rather demanding security injection testing on EE (and non EE) sites so I can fee lyour pain, and speak from some experiance. First the direct answer to your question. ...
user avatar
  • 2,418
2 votes

CE Image makes my logs sad by using xss_clean

CE Image 3.0.1 has been released and should take care of those pesky deprecation notices.
user avatar
1 vote
Accepted

Add tags to Safe HTML

Word of Warning First let me warn you the below technique involved modifying core files, and is not recommended. If you update EE you may overwrite these chnages! What you want to do is add tags to ...
user avatar
  • 2,418
1 vote

XSS vulnerability - malicious cookie value

I just tested this (really quickly) on one of my sites running 2.8.1 and couldn't exploit the exp_csrf cookie in the way described by your report. However I could do it on your site using the exact ...
user avatar
  • 7,176

Only top scored, non community-wiki answers of a minimum length are eligible