TABLE OF CONTENTS Prototype: alert(message)
Summary: Displays a modal dialog window with a message and an OK button.
Description: This method is attached to the window object. When called it displays a modal dialog with the specified message, dismissed with the OK button. Use it to inform users of errors, important actions, or results. Since the only user input is dismissing the dialog, no value is returned. Example: alert("You need to enter a valid telephone number.")
Risk: Input boxes are commonly misused for password and other types of sensitive information storage. Sensitive information should never be transmitted from clients to servers via Web page input boxes. In addition, SSL should be implemented when transferring sensitive data. Lastly, ensure that all user input is fully scrutinized whereas non-alphanumeric characters are removed where possible.
Additional Resources: http://devedge.netscape.com/library/manuals/2000/javascript/1.3/reference/window.html#1201497
Impact: Medium
Cross Reference: confirm, prompt
Prototype: apply(newThis[, argsArray])
Summary: Changes the this object used in a method call.
Description: When an object calls a method, it is implicitly passed to the method as this. The apply method allows you to explicitly change the object passed. This is useful for chaining object constructors. One can initialize the fields specific to the current object, then pass the unused arguments to the next object's constructor. The only required argument is the new this object. You can also pass an optional Array of method arguments.
Risk: Ensure that only site administrators have access to modify or statically pass parameters to this function. Strip...
