|
<< Click to Display Table of Contents >> Navigation: Telegram > 2021 > 11 > 05 > Telegram_2021-11-05T19 |
2021-11-05T19:56:49
The issue is not if IW blocks these kind of input. It does not block it because there is no way to limit user input like that. What IW does to prevent any possible attack like this is never use input data as is to generate any output
2021-11-05T19:58:25
I was thinking along the lines of the PHP function that you call to sanitize all input. I can't remember everything it removes, but is probably one of them