Security
string.txt
Associated article: String-Based Attacks Demystified
Tags: Security
Published source code accompanying the article by Herbert H. Thompson and James A. Whittaker in which they show the danger in trusting string input without checking them for validity.
String-based Attacks Demystified
by Herbert H. Thompson and James A. Whittaker
Listing One
<HTML>
<SCRIPT>
checkval=new RegExp("[-';]");
function validate(){
if (checkval.test(form1.Acct.value)){
alert("Account names and passwords should ...
