Forum Discussion
Philipp_Stadler
Nimbostratus
NimbostratusHandling of HTML editors
Hi all,
I've a question regarding HTML editors in multiple CMS. If we want attack signatures and/or parameter meta-char checking we constantly see violations because of different html-,... tags ...
Arnaud_Lemaire
Employee
EmployeeMy gut feeling is that CMS is injecting code to your application, which means most signatures or character checking are useless ... i would suggest to deactivate such checks for urls used to post by creating a wildcard parameter for them, and removing sig and meta characters.
