XSS

Hi,

Is there a good windows based XSS detection tool for web application
testing?

Thanks

Clementine

Not sure how you expect an application to check for XSS...


Some tips:

Check all POST and GET variable for unacceptable characters.

If using PHP, some variables can get through if you allow globals, so
turn them off.

Deny ALL first and then only accept allowable characters.

Regards,

Darren






Clementine wrote:
> Hi,
>
> Is there a good windows based XSS detection tool for web application
> testing?
>
> Thanks
>

Darren Campbell