From: announcements@webappsec.org
Date: Mon Dec 10 2007 - 15:50:37 EST
The Web Application Security Consortium is pleased to announce the first results
of the Script Mapping project! At this stage in the project we were able to cover
most of the test cases for Internet Explorer 7, Firefox 2 and Safari 3.
The results can be found on the project page:
http://www.webappsec.org/projects/scriptmapping/
Project Description:
The purpose of the Script Mapping Project is to come up with an exhaustive list
of vectors to execute script within a web page without the explicit use of <script>
tags. This data can be useful when testing poorly implemented Cross-site Scripting
blacklist filters, for those wishing to build an html white list system, as well as
other uses.
WASC is actively seeking volunteers from various sections of the community including
penetration testers, security researchers, and developers to contribute to this project.
If you would like to be involved with the project or if you have comments about the
results, test cases etc., please contact Romain Gaucher ( r@rgaucher.info)
Regards,
- Announcements
----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec
Have a question? Search The Web Security Mailing List Archives:
http://www.webappsec.org/lists/websecurity/
Subscribe via RSS:
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]
------------------------------------------------------------------------
This list is sponsored by: Cenzic
Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!
http://www.cenzic.com/downloads
------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:14 EDT