Andrew's Security Filter(s) v5.62 (May 10, 2009)

[Oddysey]

Mike and Kye-U;

Been following along, enjoying the ride.........

Don't forget that in some cases, the "<script...." you see in a page's source code didn't necessarily arrive in that form. Mike's comment about the DOM reminded me that you often see the write method used to create things like this:

<document.write "<scr" + "ipt>"...... etc.>

Fortunately, dbug.. will show this coding correctly. (Mike, is this what you meant by the tag sometimes being encoded?) And Kye-U, I think you once wrote a filter to ferret out this kind of behavio(u)r, didn't you?

This might also be the reason why other filters fail to work as expected, with no seeming logic for said failure.



Oddysey