[WEB SECURITY] Re: [Full-disclosure] Am I missing anything ?

[Valdis.Kletnieks@xxxxxx]

--==_Exmh_1185211525_3395P
Content-Type: text/plain; charset=us-ascii

On Tue, 24 Jul 2007 01:20:14 +0800, =?ISO-8859-1?Q?Dee=FE=E0n_Chakravarth=FF?= said:
> Hi All,
>    Just wondered if I am missing anything important. Am planning to give 
> talk on web security.

If you get through the people's heads the concept of "Filter in good, rather
than filter out bad", you'll have done the world a great service.  Note that
following that principle closes out multiple flavors of attack that you list.

--==_Exmh_1185211525_3395P
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFGpOSFcC3lWbTT17ARAobZAJ44GnmS19n0yXlQEIDUgWC4lZlhWACgvNpa
GEok3Ks1WKA3NUbEZqe0OcQ=
=6e3N
-----END PGP SIGNATURE-----

--==_Exmh_1185211525_3395P--