Add new comment to Guest Post: Drupal Security Notes

Thanks for wonderful security primer! I didn't know about these security modules before reading the article. I'm a themer / site builder and want to start testing my themes for XSS vulnerabilities. What tools should I use for XSS testing, especially on a windows development machine?

The content of this field is kept private and will not be shown publicly.

Filtered HTML

  • Web page addresses and email addresses turn into links automatically.
  • Allowed HTML tags: <a href hreflang> <em> <strong> <blockquote cite> <cite> <code> <ul type> <ol start type> <li> <dl> <dt> <dd> <h1> <h2 id> <h3 id> <h4 id> <h5 id> <p> <br> <img src alt height width>
  • Lines and paragraphs break automatically.