JT Security Whitelist Plugin is a Joomla! plugin that help prevent against XSS attacks by only allowing variables in the white list to be passed to Joomla and validates that they haven't been tampered with. If a variable is passed to Joomla that doesn't belong or if the variable has been tampered with, the plugin throws a 404 error or redirects the potential attacker to a user-defined page. The core plugin protect Joomla's core components but is also very easy for 3rd party extensions to add to the whitelist.
plugin
