[Owasp-input-api-developers] I have an immediate application for the filters!

[Steven J. S. <sj...@Ju...>]

https://yourwebmail.com/ is an alpha version of a high-powered
webmail client I'm developing. You can't compose mail using it yet,
but you can definitely read mail, both plaintext and HTML.

Right now, the only thing I do to minimize the potential for problems is
to do a regexp search/replace on the HTML before rendering it; turning
<SCRIPT> into <YWMALIAS> and </SCRIPT> into </YWMALIAS>.

I'm still not sure exactly which direction this project is taking, but 
perhaps we can discuss input filtering for the webmail app? 

I'd be happy to give y'all shell logins and e-mail boxes here so you
can check out the code, if interested. Platform is Linux/Apache/Cyrus 
(POP3/IMAP4 daemon and mailbox store)/Exim (MTA)/MySQL/PHP. LDAP will
eventually be used for online address book storage and user 
authentication.

-- 
Steve Sobol, CTO  JustThe.net LLC, Mentor On The Lake, OH  888.480.4NET
- I do my best work with one of my cockatiels sitting on each shoulder -
6/4/02:A USA TODAY poll found that 80% of Catholics advocated a zero-tolerance 
stance towards abusive priests. The fact that 20% didn't, scares me...