[Chicago-talk] Converting HEX to ASCII

Jim Jacobus JJacobus at PonyX.com
Mon Aug 31 12:44:49 PDT 2015


Thanks. HTML::Entities is what I needed. I didn't frame the question 
correctly or use the correct terminology.
I'm working on code to thwart Cross Site Scripting (XSS) into forms 
and I'm finding there are a lot of ways to inject malicious code. 
Perl is really the best way to deal with it.



At 01:28 PM 8/31/2015, Doug Bell wrote:

>Those are HTML entities (the &...; bits), so the HTML::Entities 
>module (part of the HTML::Parser distribution) will do it for you
>
>Doug Bell
><mailto:madcityzen at gmail.com>madcityzen at gmail.com
>
>On Aug 31, 2015, at 1:01 PM, Jim Jacobus 
><<mailto:JJacobus at ponyx.com>JJacobus at ponyx.com> wrote:
>
>>
>>I feel dumb for asking, but is there a quick way to convert:
>><code>
>>
>>%#x3cIMG 
>>SRC=javascript:alert( 
>>'XSS')%#x3e
>>
>></code>
>>to
>><code>
>>
>><IMG SRC=javascript:alert( 'XSS')>
>>
>></code>
>>I thought there would be a cpan module for this.
>>_______________________________________________
>>Chicago-talk mailing list
>><mailto:Chicago-talk at pm.org>Chicago-talk at pm.org
>>http://mail.pm.org/mailman/listinfo/chicago-talk
>_______________________________________________
>Chicago-talk mailing list
>Chicago-talk at pm.org
>http://mail.pm.org/mailman/listinfo/chicago-talk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.pm.org/pipermail/chicago-talk/attachments/20150831/1b1310fa/attachment.html>


More information about the Chicago-talk mailing list