Skip to main content
This topic is closed to new replies. Start a new post to keep the conversation going.

1 reply

skyflare21
Participant
January 13, 2013

The scriptProtect feature in CFML engines doesn't protect against using code like shown below to insert malicious code.  You must still validate data submitted by users you don't trust.

onclick="javascript:doEvil();"  or href="javascript:doEvil();"

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices