Filter out iframe attacks

Written by Michael Shinn

Friday, 18 April 2008 10:42

iframe attacks seem to be taking a hold with many vulnerable websites. The problem obviously being vulnerable ap plications, which we would all like to see fixed. However, not everyone can be so lucky as to have either perfect applications, or perfect countermeasures against these vulnerabilities. Enter output filtering. We've put together a special set of rules for anyone running apache. This will filter out all your iframe attacks. If you are an ASL customer, you can rest easy, as you already have this capability!

If you are running apache, you will want to use our iframe filtering countermeasures. To do so, you will need to download two files:

00_ASL_iframe_protection.conf

and

/etc/asl/remove-bad-iframes.txt

This will automatically clean all your websites and remove any iframes that would include trojans, etc. targeted at your users. Install the 00_ASL_iframe_protection.conf file in your /etc/httpd/conf.d directory, and the remove-bad-iframes.txt in /etc/asl.

Add comment

JComments