
Tuesday June 13, 2006
Cross Site Scripting Prevention in Sun Java System Web Server 7.0
Cross Site Scripting Prevention in Sun Java System Web Server 7.0
Check out the new improvements we
made in Sun Java System Web Server 7.0. It can be downloaded for
free from
http://www.sun.com/download/index.jsp?cat=Web%20%26%20Proxy%20Servers&tab=3&subcat=Web%20Servers.
In this blog I will talk about Cross Site Scripting (XSS) prevention.
Obj.conf now supports a lot of features which allows you to use it a
lot like a programming language, which allows us to configure in our
WebServer features similar to in ModSecurity Apache Module.
The main method of preventing Cross Site Scripting (XSS) is through entity encoding, using entities
such as "
<".
We now have a introduced a native input stage filter based on sed which can do XSS filtering.
Read More>>>
[
Read More]
Posted by meena
( Jun 13 2006, 11:49:12 AM IST )
Permalink

Friday June 09, 2006
Dynamic compression of static files in Sun Java System Web Server 7.0
Dynamic compression of static files in Sun Java System Web Server 7.0
Check out the new cool features in Sun Java
System Web Server 7.0 which can be downloaded for
free from
http://www.sun.com/download/index.jsp?cat=Web%20%26%20Proxy%20Servers&tab=3&subcat=Web%20Servers .
In this blog I will talk about dynamic compression of static files.
We have also implemented caching of compressed data
for static files. We have added a new service function
"compress-file" which will
compress static files (if the compressed file doesn't exist) and serves
it from the cache if the compressed version already exists.
Lets say if I want to create .gz files on the fly for static
files, all I have to do is to modify obj.conf as shown below.
READ MORE>>>
[
Read More]
Posted by meena
( Jun 09 2006, 12:28:26 PM IST )
Permalink