March 20, 2009

Zend Filter StripTags XSS Vulnerability

Posted by Dave on March 20, 2009 in zend framework

Just a heads up to those using the Zend Framework. Wil Sinclair posted the following to the Zend Framework announcements mailing list:
The Zend Framework team was recently notified of an XSS attack vector in its Zend_Filter_StripTags class. Zend_Filter_StripTags offers the ability to strip HTML tags from text, but also to selectively choose which tags and […]