|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PhillyOnRails] How To needed -- testing for header injection
|
You can test it out using the tamper data plugin for firefox:
https://addons.mozilla.org/firefox/966/
Walter Lee Davis wrote:
> I have a form that I just noticed was sending some spam mail. I
> hardened its inputs, replacing all instances of \n,\r, and \t with ?,
> and I haven't seen any more attempts coming through it. But I would
> like to check. I was there in October, and recall Cliff Moon doing
> something tricky along these lines. Can anyone remind me of the right
> way to test this?
>
> Thanks,
>
> Walter
>
> _______________________________________________
> To unsubscribe or change your settings, visit:
> http://lists.phillyonrails.org/mailman/listinfo/talk
>
>
_______________________________________________
To unsubscribe or change your settings, visit:
http://lists.phillyonrails.org/mailman/listinfo/talk
|
|