Aaron Saray

open source programmer,
web developer

entrepreneur, author
and musician

My Blog

contains PHP, Web and business/entrepreneurial related content. Please join in the conversation!

Monthly Archives: March 2008

XSS with Img OnError attribute

So much of my time is spent worrying over the src or href tags on images and links – that I sometimes forget about the other attributes. Imagine being able to make an image which has no black-flagged content in … Continue reading

Posted in javascript, PHP, security | Tagged , , | Leave a comment

Link Checking Module – 1st attempt

So I wrote some code the other day. It sat in my code repository and I never tested it. I was pretty certain it was going to be some good code, though. A few weeks later I came back to … Continue reading

Posted in PHP, Website Monitoring Project | Tagged | 2 Comments

Update your URL filtering: possible XSS from "Data" URL scheme – Firefox

In regards to the Data in URL scheme (RFC here), I’ve found an interesting issue with the way firefox handles it which could lead to some XSS I think. First of all, if you’re not aware of the feature, let … Continue reading

Posted in html, javascript, security | Tagged , , | Leave a comment