Websocket bad input filter

[itsmehandy]

Hi,

I'm sending data over a websocket but need apache to stop certain characters getting into my server code.

Essentially i have added validation on my web page to stop "</script>" being entered into input fields to stop XSS.
But, a tool such as BURP can inject "</script>" into my sending data.
I need apache to be the filter.
Is this possible?

Thanks.

[phranque]

you probably want to look at Apache Module mod_sed:
https://httpd.apache.org/docs/trunk/mod/mod_sed.html [httpd.apache.org]