XSS Prevention

Prophaze WAF can prevent advanced XSS attacks in the following ways

  • Blocks injection of client side scripts into browsers by attackers which allows them to steal session and cookie data

  • Uses Open source lib injection library along with regular expressions

  • HTML tag finder

  • Style/Script Tag prevention

  • JS Fragment prevention (URI)

  • CSS Fragment Prevention

  • Blocks XSS fingerprints

  • Event Handler Block

  • Attribute Vector Prevention

  • Noscript html injection

  • IE filters

  • Malformed XSS Filter

  • UTF-7 encoding XSS Prevention (IE)

  • Disallowed HTML attributes

Last updated