＠IT：Webアプリケーションに潜むセキュリティホール（12）# スクリプトを呼び出せるタグは禁止 SecFilter "" SecFilter "" SecFilter "" SecFilter "" # 疑似プロトコルは禁止 SecFilter "javascript:" SecFilter "vbscript:" SecFilter "about:" # スクリプトを呼び出せるので禁止 SecFilter "expression\(" SecFilter "&{.*};" # イベントハンドラは禁止 SecFilter "onError" SecFilter "onUnload" SecFilter "onBlur" SecFilter "onFocus" SecFilter "onClick" SecFilter "onMouseOver" SecFilter "onMouseOut" SecFilter "onSubmit" SecFilt
