Re: Suggestion on how to eliminate Cross-site-scripting (XSS) bugs for good.

Sam Tregar <[email protected]> Wed, 15 Nov 2006 16:00:53 -0500 (EST)
Newsgroups gmane.comp.lang.perl.modules.html-template
Message-ID <[email protected]>
On Tue, 17 Oct 2006, Tom Heady wrote:

> Actually, I found that turning off escaping (ESCAPE="0") does not work
> if you specify a default escape.
>
> See http://rt.cpan.org/Public/Bug/Display.html?id=18274 for more details
> and a fix.

I'll make sure this gets into the next release.  I'm planning to put
one out soon.

-sam

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV