String::Clean::XSS - Clean up for Cross Site Scripting (XSS)

String-Clean documentation Contained in the String-Clean distribution.

Index

Code Index:

NAME

Top

String::Clean::XSS - Clean up for Cross Site Scripting (XSS)

SYNOPSIS

Top

Clean strings to protect from XSS attacks.

EXAMPLES

   use String::Clean::XSS;

   my $stuff_from_user = '<script>bad stuff</script>';

   my $safe_login    = convert_XSS($stuff_from_user);
   # results in '&lt;script&gt;bad stuff&lt;/script&gt;'

   my $cleaned_login = clean_XSS($stuff_from_user);
   $ results in 'scriptbad stuff/script'

FUNCTIONS

Top

clean_XSS

   clean_XSS( $string );

Removes angle brackets from the given string.

convert_XSS

   convert_XSS( $string );

Converts angle brackets to there HTML entities.

AUTHOR

Top

ben hengst, <notbenh at CPAN.org>

BUGS

Top

Please report any bugs or feature requests to bug-string-clean at rt.cpan.org, or through the web interface at http://rt.cpan.org/NoAuth/ReportBug.html?Queue=String-Clean. I will be notified, and then you'll automatically be notified of progress on your bug as I make changes.

SUPPORT

Top

You can find documentation for this module with the perldoc command.

    perldoc String::Clean

You can also look for information at:

* RT: CPAN's request tracker

http://rt.cpan.org/NoAuth/Bugs.html?Dist=String-Clean

* AnnoCPAN: Annotated CPAN documentation

http://annocpan.org/dist/String-Clean

* CPAN Ratings

http://cpanratings.perl.org/d/String-Clean

* Search CPAN

http://search.cpan.org/dist/String-Clean

ACKNOWLEDGEMENTS

Top

COPYRIGHT & LICENSE

Top

Copyright 2007 ben hengst, all rights reserved.

This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

String-Clean documentation Contained in the String-Clean distribution. 
package String::Clean::XSS;
BEGIN {
  $String::Clean::XSS::VERSION = '0.031';
}

#use base qw{Exporter String::Class};
use Exporter qw{import};
our @EXPORT = qw{clean_XSS convert_XSS};

use strict;
use warnings;
use String::Clean;
use Carp::Assert::More;



sub clean_XSS {
   my ( $string ) = @_;
   assert_defined($string);
   my $yaml = q{
---
- '<'
- '>'
};
   return String::Clean->new()->clean_by_yaml( $yaml, $string );
}


   
sub convert_XSS {
   my ( $string ) = @_;
   assert_defined($string);
   my $yaml = q{
---
'<' : '&lt;'
'>' : '&gt;'
};
   return String::Clean->new()->clean_by_yaml( $yaml, $string );
}


1; # End of String::Clean::XSS