XSS - Cross Site Scripting

Rails
1

Hi All,

Is there some kind of library etc that I can pass user input through to
prevent cross site scripting in Ruby?

for example if I accept user input and then try to textilize it I am
vulnerable to cross site scripting - anyway around this?

Cheers,

D.

2

While I’m not sure if there is a ruby lib for this sort of thing, you
might want to look into modsecurity and secure yourself from the server
level:

http://www.modsecurity.org/

-lincoln

3

On 9/7/06, D L [email protected] wrote:

D.

–

http://weblog.techno-weenie.net/2006/9/3/white-listing-plugin-for-rails

–
Rick O.
http://weblog.techno-weenie.net
http://mephistoblog.com

4

Rick O. wrote:

On 9/7/06, D L [email protected] wrote:

D.

–

http://weblog.techno-weenie.net/2006/9/3/white-listing-plugin-for-rails

–
Rick O.
http://weblog.techno-weenie.net
http://mephistoblog.com

Great - Thanks for all the responses - I will take a look.