Developer's Guide to Web Application Security

477 Index

for CGI scripts, 141–142, 152

code auditing, 205

Comprehensive Perl Archive

Network, 45

cross-site scripting, 213

external objects/libraries, 220

external programs, calling, 218

in feedback form, 119–121

format string vulnerabilities and,

212

functions that take filenames, 216

networking/communication

streams, 223

SQL/database queries, checking,

223

tainted variable in, 207

Perl Monks Web site, 43

PERLNIKTO.PL command, 133,

134

permissions

CGI script writing rules, 146

JVM policy files, 252–256

Policy Tool and, 256–258

sandbox settings, 240–241

SecurityManager class and,

258–259

persistent cookies, 413

PGP. See Pretty Good Privacy

PGP Corporation, 397

Phaos Technologies, 394

phone system hacking, 4–5

PHP: Hypertext Preprocessor

code auditing, 205

cross-site scr ...