Welcome to WebmasterWorld Guest from

Forum Moderators: Ocean10000 & phranque

Message Too Old, No Replies

Websocket bad input filter

Websocket bad input filter

3:54 pm on Mar 27, 2017 (gmt 0)

New User

joined:Mar 27, 2017
posts: 1
votes: 0


I'm sending data over a websocket but need apache to stop certain characters getting into my server code.

Essentially i have added validation on my web page to stop "</script>" being entered into input fields to stop XSS.
But, a tool such as BURP can inject "</script>" into my sending data.
I need apache to be the filter.
Is this possible?

10:22 pm on Mar 27, 2017 (gmt 0)


WebmasterWorld Administrator phranque is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Aug 10, 2004
votes: 193

you probably want to look at Apache Module mod_sed:
https://httpd.apache.org/docs/trunk/mod/mod_sed.html [httpd.apache.org]