SanitizedIdentifier

<< Click to Display Table of Contents >>

Navigation:  Functions >

SanitizedIdentifier

SIGNATURE=IWUtils.SanitizedIdentifier@string

 

ETYPE=Function

 

Declaration:

Delphi:

function SanitizedIdentifier(const aIdentifier: string): string;

C++:

String SanitizedIdentifier(const String aIdentifier);

 

Unit: IWUtils.pas

 

Description: Remove all chars which are not valid identifiers. This is used against parameters received from browser that must be some Delphi valid identifier, e.g. a method name (AJAX requests) or a control name (POST parameters), etc. Avoids Cross-Site-Scripting attacks using carefully crafted Ajax requests

 

Parameters:

 

•aIdentifier: string

 

Result(string):