Tuesday 12 January 2010 — This is over 13 years old. Be careful.
I’ve been struggling with the XSS filter in IE8. It seems capricious and secretive, and is getting in the way of an application we’re running on AOL.com. I asked about it on stackoverflow, and got some more information, but still not enough to get it out of my hair.
Anyone have any experience with this beast?
For reference, here are some articles on the filter that describe our goals, design philosophy, and architecture:
If you'd like to get in contact with me but are unable to see the email address associated with this post, please drop me a note here:
It looks like you may already be in good shape with the header and I see EricLaw responded on StackOverflow. Please let me know if you have any further issues/questions/feedback though, I'd be happy to chat.
Add a comment: