| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20071210205021.52344.qmail@cgisecurity.net> Date: Mon, 10 Dec 2007 15:50:21 -0500 (EST) From: announcements@...appsec.org To: bugtraq@...urityfocus.com Subject: WASC Announcement: The Script Mapping Project Results and Call for Participation The Web Application Security Consortium is pleased to announce the first results of the Script Mapping project! At this stage in the project we were able to cover most of the test cases for Internet Explorer 7, Firefox 2 and Safari 3. The results can be found on the project page: http://www.webappsec.org/projects/scriptmapping/ Project Description: The purpose of the Script Mapping Project is to come up with an exhaustive list of vectors to execute script within a web page without the explicit use of <script> tags. This data can be useful when testing poorly implemented Cross-site Scripting blacklist filters, for those wishing to build an html white list system, as well as other uses. WASC is actively seeking volunteers from various sections of the community including penetration testers, security researchers, and developers to contribute to this project. If you would like to be involved with the project or if you have comments about the results, test cases etc., please contact Romain Gaucher ( r@...ucher.info) Regards, - Announcements ---------------------------------------------------------------------------- Join us on IRC: irc.freenode.net #webappsec Have a question? Search The Web Security Mailing List Archives: http://www.webappsec.org/lists/websecurity/ Subscribe via RSS: http://www.webappsec.org/rss/websecurity.rss [RSS Feed]
Powered by blists - more mailing lists