PHPでのIDS

found injection: <script>alert('xss');</script>

rule: (?:\\?\W.*\>)|(?:\s?\/>)
rule-description: finds html breaking injections including whitespace attacks
impact: 4

rule: (?:\\?\W.*\<)
rule-description: finds attribute breaking injections including whitespace attacks
impact: 4

rule: (?:\\?\W\s*(?:\)|\}))
rule-description: finds closing javascript breaker including whitespace attacks
impact: 4

rule: (?:(?:\(|\{)\s*\\?\W)
rule-description: finds opening javascript breaker including whitespace attacks
impact: 4

rule: (?:javascript:|@import|;base64|alert[\s]?\(|expression[\s]?\(|urn[\s]?\(|fromCha...
rule-description: detects imported poisoned stylesheets, base64 attacks, vbscript probings and typical js injections
impact: 4

rule: (?:\<s(?:.*)t)
rule-description: detects obfuscated script tags
impact: 2

rule: (?:\<[\/]?(?:(?:[i]?frame)|(?:script)|(?:input)|(?:button)(?:textarea)|(?:sty...
rule-description: detects possibly malicious html elements including some attributes
impact: 4

Overall impact: 26