Please never take parameters unchecked in any programming language. But at least the T-Dose people added <%=h text => so you can't easily cross site script
Subscribe to:
Post Comments (Atom)
skip to main |
skip to sidebar
My Rant about computing and other things in life
Posts
1 comment:
openbsd cvsweb has a similar "problem", it's not really a security issue as such is it? Just a fun little hack.
http://www.nabble.com/XSS-vulnerability-in-OpenBSD's-CVSweb-td19103661.html
Post a Comment