Hi,
Currently using Oracle APEX v4.2 with Oracle 11g R2 DB.
I've basically been assigned to prevent Cross Site Scripting (XSS) within an Oracle APEX application, specifically when it comes to input type fields such as text and textareas fields.
An example of XSS that I don't want stored in the database would something like this:
<script>alert("XSS")</script>
Based on this, what would might be the best possible way to escape these types of special characters if say I had around ten text items that a user could enter XSS in, on an Oracle APEX page, when submitted?
I'm thinking a global computation or perhaps a database trigger or something within the actual page of the ten text input items.
Any ides/help would be great.
Thanks.
Tony.