html - Can Malicious Code Be Executed From A CSS File? -

-

i have form allows administrators change basic css attributes on website. thinking of creating form advanced admins display entire css file inside text area , allow them edit freely. im not worried file being wiped can restored. worried add code css file cause major damage web server. possible execute malicious code css file?

it can if have access modify. below link describes xss , css (cross site scripting). can redirect background 1 example http://www.acunetix.com/websitesecurity/cross-site-scripting/


Comments

Post a Comment

Popular posts from this blog

html - height not adding height to a empty div -

-
hey guys new bootstrap , have following html :: <div class="col-md-6 clients"> <div class="col-xs-4"><img src="img/1.jpg" alt="" class="img-responsive"></div> <div class="col-xs-4"><img src="img/1.jpg" alt="" class="img-responsive"></div> <div class="col-xs-4"><img src="img/1.jpg" alt="" class="img-responsive"></div> <div class="col-xs-4"><img src="img/1.jpg" alt="" class="img-responsive"></div> <div class="col-xs-4"><img src="img/1.jpg" alt="" class="img-responsive"></div> <div class="col-xs-4"><img src="img/1.jpg" alt="" class="img-responsive"></div> </div> now after 1st 3 col-xs-4 wan...
Read more

Oracle SQL. How to select specific IDs where value of columns specify criteria? -

-
i have following statement/query: select table1.file_id, table1.status, table2.status table1 inner join table2 on table1.file_id = table2.file_id; the result follows: file id | status table 1 | status table 2 ----------------------------------------------------- 5500002 | ax | ics 5500002 | ax | icso 5500002 | axo | ics 5500003 | ax | ics 5500003 | ax | ics 5500003 | ax | ics 5500004 | null | icso test 5500004 | axo | ics 5500004 | ax | null i need each file id check 4 statuses: - ax - axo - ics - icso i want run select on file id s cover 4 statuses. can see file id occurs multiple times , i'd want query return file id fulfills requirement, in instance return 5500002 , 5500004. for 550000...
Read more

python - Robot Framework location and name of keyword -

-
i want create python library 0 argument function custom robot framework keywords can call. needs know absolute path of file keyword defined, , name of keyword. know how similar test cases using robot.libraries.builtin library , ${suite_source} , ${test name} variables, can't find similar custom keywords. don't care how complicated answer is, maybe have dig guts of robot framework's internal classes , access data somehow. there way this? thanks janne able find solution. from robot.running.context import execution_contexts def resource_locator(): name = execution_contexts.current.keywords[-1].name libname = execution_contexts.current.get_handler(name).libname resources = execution_contexts.current.namespace._kw_store.resources path = "" key in resources._keys: if resources[key].name == libname: path = key break return {'name': name, 'path': path} execution_context...
Read more