parameter actions - a security issue?
Florian Gnägi <[email protected]> Mon, 3 Feb 2003 15:35:48 +0100
| Newsgroups | gmane.comp.java.jpublish.devel |
|---|---|
| Organization | OLAT-Zentrum Universität Zürich |
| Message-ID | <00db01c2cb91$9e52acf0$9f703c82@zipcfg> |
SW4gdGhlIGpQdWJsaXNoLnhtbCBmaWxlIHRoZXJlIGlzIGEgY29uZmlndXJhdGlvbiBvcHRpb24N Cg0KPGFjdGlvbi1pZGVudGlmaWVyPmFjdGlvbjwvYWN0aW9uLWlkZW50aWZpZXI+DQoNClRoaXMg YWxsb3dzIHRvIGNyZWF0ZSBVUkxzIGxpa2Ugd3d3LmJsYS5jb20vbXlmaWxlLm10bWw/YWN0aW9u PWRvVGhpc0FuZFRoYXRBY3Rpb24NCg0KSSBjb25zaWRlciB0aGlzIGZlYXR1cmUgYSB2ZXJ5IHBy b2JsZW1hdGljIHNpbmNlIGl0IGdpdmVzIHRoZSB1c2VyIGEgZnJlZSB0aWNrZXQgdG8gaXNzdWUg ZXZlcnkgYWN0aW9uIHRoYXQgaXMgYXZhaWxhYmxlIGluIHRoZSBlbnRpcmUgc3lzdGVtLiBMZXQn cyBzYXkgeW91IGhhdmUgYW4gYWN0aW9uIHNvbWV3aGVyZSB0aGF0IGlzIGNhbGxlZCAnZHJvcE15 RW50aXJlRGF0YWJhc2UnIGFuZCB5b3UgaGF2ZSBwcm90ZWN0ZWQgdGhlIHBhZ2UgdGhhdCB1c2Vz IHRoaXMgYWN0aW9uIHdpdGggYSBwYXRoIGFjdGlvbiB0aGF0IGNoZWNrcyBmb3Igc2VjdXJpdHku IE9uZSB3b3VsZCBleHBlY3QgdG8gYmUgb24gdGhlIHNhdmUgc2lkZSwgaG93ZXZlciB1c2VycyB3 aWxsIGJlIGFibGUgdG8gYnlwYXNzIHRoZSBzZWN1cml0eSBhbmQgY2FsbCB0aGUgYWN0aW9ucyBk aXJlY3RseSB3aXRob3V0IGFueSBwcmVjb25kaXRpb25zIChsaWtlIHRoZSBzZWN1cml0eSBhY3Rp b24gdGhhdCB3b3VsZCBwcm90ZWN0IHRoZSBwYWdlIG9yIHN0YXRlIGluIGEgd29ya2Zsb3cgdGhh dCBtdXN0IGJlIHNldCBzb21ld2hlcmUgZWxzZSkuIA0KDQpUaGlzIG1pZ2h0IG5vdCBiZSBzdWNo IGEgcHJvYmxlbSBpbiBhIGNsb3NlZCBlbnZpcm9ubWVudCwgYnV0IGl0IGRlZmluaXRlbHkgaXMg aW4gYW4gb3BlbiBzb3VyY2UgcHJvamVjdCB3aGVyZSBzZWN1cml0eSBieSBvYnNjdXJpdHkgaXMg bm90IHBvc3NpYmxlLiBPbmUgY291bGQgcHJvdGVjdCBlYWNoIGFjdGlvbiBieSBzb21lIGxpbmVz LCBidXQgdGhpcyB3b3VsZCBtZXNzIHVwIGFueSBuaWNlIGRlc2lnbiB3aXRoIGEgbG90IG9mIHJl ZHVuZGFudCBjb2RlLiANCg0KT2YgY291cnNlLCBjbGVhbiBkZXNpZ24gd2hlcmUgc2VjdXJpdHkg aXMgYmVlaW5nIGNoZWNrZWQgb24gYSBsb3dlciBsZXZlbCwgZWcuIHdpdGhpbiB0aGUgbWFuYWdl cnMsIHNvbWVob3cgcHJldmVudHMgdXNlcnMgZnJvbSBpc3N1aW5nIGFjdGlvbnMgbGlrZSB0aGUg ZHJvcE15RW50aXJlRGF0YWJhc2UgYWN0aW9uLCBidXQgdGhlcmUgYXJlIHN0aWxsIG1hbnkgY2Fz ZXMgd2hlcmUgdW5leHBlY3RlZCBzdHVmZiBjb3VsZCBoYXBwZW4uIA0KDQpVbmZvcnR1bmF0ZWx5 IGl0IGlzIG5vdCBwb3NzaWJsZSB0byB0dXJuIG9mZiB0aGlzIHBhcmFtZXRlciBhY3Rpb24gZmVh dHVyZS4gSW4gbXkgcG9pbnQgb2YgdmlldyBpdCBzaG91bGQgYmUgcG9zc2libGUgdG8gdHVybiBp dCBvZmYgZW50aXJlbHkuIEFzIGFuIGFsdGVybmF0aXZlIGFjdGlvbnMgdGhhdCBjYW4gYmUgcGFy YW1ldGVyIGFjdGlvbnMgc2hvdWxkIGJlIGRlY2xhcmVkIGFzIHN1Y2ggZXhwbGljaXRlbHksIGUu Zy4gYnkgaW1wbGVtZW50aW5nIGFub3RoZXIgaW50ZXJmYWNlIHRoYW4gdGhlIGRlZmF1bHQgYWN0 aW9uIGludGVyZmFjZS4gUmlnaHQgbm93IHRoZSBvbmx5IHNvbHV0aW9uIEkgc2VlIGlzIHRvIHVz ZSBzb21lIGNyeXB0aWMgcmFuZG9tbHkgZ2VuZXJhdGVkIGFjdGlvbi1pZGVudGlmeWVyLCBidXQg dGhpcyBpcyBub3QgYSByZWFsIHNvbHV0aW9uLg0KDQpXaGF0IGRvIHlvdSBtZWFuPyBJcyB0aGVy ZSBhIGNvbmZpZ3VyYXRpb24gb3B0aW9uIEkgaGF2ZW4ndCBzZWVuIHNvIGZhcj8NCg0KU2luY2Vy bHkNCi1GbG9yaWFuIEduYWVnaQ0KDQpGbG9yaWFuIEdu5GdpIDxnbmFlZ2lAaWQudW5pemguY2g+ DQpodHRwOi8vd3d3Lm9sYXQtemVudHJ1bS51bml6aC5jaA0KDQpDZW50ZXIgZm9yIENvbXB1dGlu ZyBTZXJ2aWNlcw0KT0xBVC1aZW50cnVtDQpVbml2ZXJzaXR5IG9mIFp1cmljaCAgICAgICAgICAg ICAgICBQaG9uZTogKzQxIDEgNjMgNTY3ODgNCldpbnRlcnRodXJlcnN0cmFzc2UgMTkwDQpDSC04 MDU3IFp1ZXJpY2ggICAgICAgICAgICAgICAgICBGQVg6ICAgKzQxIDEgNjMgNTQ1MDU= ------------------------------------------------------- This SF.NET email is sponsored by: SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See! http://www.vasoftware.com