[Chicago-talk] Converting HEX to ASCII
Jim Jacobus
JJacobus at PonyX.com
Mon Aug 31 12:44:49 PDT 2015
Thanks. HTML::Entities is what I needed. I didn't frame the question
correctly or use the correct terminology.
I'm working on code to thwart Cross Site Scripting (XSS) into forms
and I'm finding there are a lot of ways to inject malicious code.
Perl is really the best way to deal with it.
At 01:28 PM 8/31/2015, Doug Bell wrote:
>Those are HTML entities (the &...; bits), so the HTML::Entities
>module (part of the HTML::Parser distribution) will do it for you
>
>Doug Bell
><mailto:madcityzen at gmail.com>madcityzen at gmail.com
>
>On Aug 31, 2015, at 1:01 PM, Jim Jacobus
><<mailto:JJacobus at ponyx.com>JJacobus at ponyx.com> wrote:
>
>>
>>I feel dumb for asking, but is there a quick way to convert:
>><code>
>>
>>%#x3cIMG
>>SRC=javascript:alert(
>>'XSS')%#x3e
>>
>></code>
>>to
>><code>
>>
>><IMG SRC=javascript:alert( 'XSS')>
>>
>></code>
>>I thought there would be a cpan module for this.
>>_______________________________________________
>>Chicago-talk mailing list
>><mailto:Chicago-talk at pm.org>Chicago-talk at pm.org
>>http://mail.pm.org/mailman/listinfo/chicago-talk
>_______________________________________________
>Chicago-talk mailing list
>Chicago-talk at pm.org
>http://mail.pm.org/mailman/listinfo/chicago-talk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.pm.org/pipermail/chicago-talk/attachments/20150831/1b1310fa/attachment.html>
More information about the Chicago-talk
mailing list