Cross-site Scripting (XSS) Filtering
Calyx RIM includes Cross-site Scripting (XSS) filtering that prevents users from adding malicious script codes in the form of user input in an attempt to access data. Any data that includes HTML tags and text patterns not included in the exception list (whitelist) will not be saved by the system.
By default, the following text patterns will be prevented from being saved unless they are included in the whitelist:
- onmouseover
- document.cookie
- window.open
- onload
- onerror
- onreset
- onclick
- ondblclick
- ondrag
- onfocus
- onblur
- onchange
- onselect
- onkey
- oncut
- oncopy
- onpaste
- onmouse
- onscroll
- onwheel
- oninput
- oninvalid