Skip to main content
This topic has been closed for replies.

1 reply

S
skyflare21
Participant
January 13, 2013

The scriptProtect feature in CFML engines doesn't protect against using code like shown below to insert malicious code.  You must still validate data submitted by users you don't trust.

onclick="javascript:doEvil();"  or href="javascript:doEvil();"

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices