Re: stripping HTML, SQL injections ...
От | Martin Gainty |
---|---|
Тема | Re: stripping HTML, SQL injections ... |
Дата | |
Msg-id | BAY108-DAV128D3C01D5EBA83D7C944BAE820@phx.gbl обсуждение исходный текст |
Ответ на | PITR and warm standby setup questions ("Mason Hale" <masonhale@gmail.com>) |
Ответы |
Re: stripping HTML, SQL injections ...
|
Список | pgsql-general |
this is a very simple html tag strip routine I dont understand what security you had in mind .. so I take it you're not a fan of dojo or GWT? M-- ----- Original Message ----- From: "Ian Barwick" <barwick@gmail.com> Cc: "Scott Marlowe" <scott.marlowe@gmail.com>; "pgsql-general" <pgsql-general@postgresql.org> Sent: Wednesday, November 14, 2007 7:21 PM Subject: Re: [GENERAL] stripping HTML, SQL injections ... > Martin, > > 2000/11/15, Martin Gainty <mgainty@hotmail.com>: > > Scott- > > > > In JavaScript > > http://www.java2s.com/Tutorial/JavaScript/0520__Regular-Expressions/StripHTM > > L.htm > > I don't remember what the consensus was back in 2000 (your mail's > timestamp), but in 2007 it's Not A Good Idea to rely on client-side > validation for security-related operations ;). > > > Regards > > Ian Barwick > > > -- > http://sql-info.de/index.html > > ---------------------------(end of broadcast)--------------------------- > TIP 6: explain analyze is your friend >
В списке pgsql-general по дате отправления: