Click here to Skip to main content
15,923,376 members
Home / Discussions / Design and Architecture
   

Design and Architecture

 
QuestionAPI Calls - Standards and Practices? Pin
TheOnlyRealTodd8-Aug-16 22:13
professionalTheOnlyRealTodd8-Aug-16 22:13 
AnswerRe: API Calls - Standards and Practices? Pin
Gerry Schmitz9-Aug-16 7:28
mveGerry Schmitz9-Aug-16 7:28 
AnswerRe: API Calls - Standards and Practices? Pin
jschell1-Sep-16 6:47
jschell1-Sep-16 6:47 
QuestionSpam: Redirect, manipulated in a video comment section (script)? Pin
Member 1265728127-Jul-16 16:05
Member 1265728127-Jul-16 16:05 
AnswerRe: Spam: Redirect, manipulated in a video comment section (script)? Pin
Richard MacCutchan27-Jul-16 20:30
mveRichard MacCutchan27-Jul-16 20:30 
GeneralRe: Spam: Redirect, manipulated in a video comment section (script)? Pin
Peter_in_278027-Jul-16 20:55
professionalPeter_in_278027-Jul-16 20:55 
GeneralRe: Spam: Redirect, manipulated in a video comment section (script)? Pin
Richard MacCutchan27-Jul-16 21:52
mveRichard MacCutchan27-Jul-16 21:52 
AnswerRe: Spam: Redirect, manipulated in a video comment section (script)? Pin
Richard Deeming28-Jul-16 1:47
mveRichard Deeming28-Jul-16 1:47 
You need to update your site's code to HTML-encode the comments. Until you do that, your site is vulnerable to persisted cross-site scripting.

Cross-site Scripting (XSS) - OWASP[^]

There are much more dangerous things a malicious user can post. For example, they could steal your cookies, and impersonate you on the site. Or they could download malware onto your users' computers, which would appear to come from your site.

Once you've fixed the vulnerability, you will be able to open the page without the script from that comment executing.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer


QuestionDirect Debit System Pin
shyms0529-Jun-16 2:32
shyms0529-Jun-16 2:32 
AnswerRe: Direct Debit System Pin
Eddy Vluggen29-Jun-16 3:03
professionalEddy Vluggen29-Jun-16 3:03 
AnswerRe: Direct Debit System Pin
Pete O'Hanlon29-Jun-16 3:25
mvePete O'Hanlon29-Jun-16 3:25 
GeneralRe: Direct Debit System Pin
Jack Hensley27-Jul-16 3:07
Jack Hensley27-Jul-16 3:07 
Questionapplication architecture Pin
AppNewbie6-Jun-16 5:36
AppNewbie6-Jun-16 5:36 
AnswerRe: application architecture Pin
Slacker00727-Jul-16 3:35
professionalSlacker00727-Jul-16 3:35 
AnswerRe: application architecture Pin
AlexaGrey8628-Aug-16 2:42
AlexaGrey8628-Aug-16 2:42 
QuestionWinForms app with WCF comunicate with another app hosted on server Pin
Member 1189129114-May-16 19:38
Member 1189129114-May-16 19:38 
AnswerRe: WinForms app with WCF comunicate with another app hosted on server Pin
Richard Deeming16-May-16 1:13
mveRichard Deeming16-May-16 1:13 
AnswerRe: WinForms app with WCF comunicate with another app hosted on server Pin
Nathan Minier16-May-16 1:48
professionalNathan Minier16-May-16 1:48 
AnswerRe: WinForms app with WCF comunicate with another app hosted on server Pin
Slacker00727-Jul-16 3:32
professionalSlacker00727-Jul-16 3:32 
QuestionArchitecture Presentation Pin
Member 1252157113-May-16 2:08
Member 1252157113-May-16 2:08 
AnswerRe: Architecture Presentation Pin
Richard MacCutchan13-May-16 2:43
mveRichard MacCutchan13-May-16 2:43 
AnswerRe: Architecture Presentation Pin
George Jonsson13-May-16 3:08
professionalGeorge Jonsson13-May-16 3:08 
AnswerRe: Architecture Presentation Pin
Gerry Schmitz13-May-16 4:07
mveGerry Schmitz13-May-16 4:07 
QuestionRemoving UIP Pin
dotnetjos12-May-16 0:10
dotnetjos12-May-16 0:10 
AnswerRe: Removing UIP Pin
Richard Deeming12-May-16 1:52
mveRichard Deeming12-May-16 1:52 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.