Re: website on your server has base64 explioit

The content hosted on *.blogspot.com is user editable. All Blogger blog
pages have a templating engine that our users can and do use to edit their
page content.

I suggest your cousin starts a conversation on the Blogger Product Forum
<https://productforums.google.com/forum/#!categories/blogger/something-is-broken>
to learn how to fix this issue. Her site is running a heavily customised
template.


On Fri, May 30, 2014 at 4:28 AM, jesse greene <[email protected]>
wrote:

> Hello,
>
> My Cousin has a blog on your servers and has been recently indicated by
> facebook as spam when she posts to her FB page.     I found a Base64 decode
> when i pulled up the page source for her home page. Please see the line
> below in RED and i have pulled out the decode and will attach a image of
> it.
>
> Website: http://momscrazycooking.blogspot.com/
>
> /* Comments----------------------------------------------- */.comments .comments-content .icon.blog-author {background-repeat: no-repeat;background-image: url(data:image/png;base64*******************************************************************************************************}.comments .comments-content .loadmore a {background: #ffffff url(http://www.blogblog.com/1kt/ethereal/bird-2toned-blue-fade.png) repeat-x scroll top left;}.comments .comments-content .loadmore a {border-top: 1px solid #dbdbdb;border-bottom: 1px solid #dbdbdb;}.comments .comment-thread.inline-thread {background: #ffffff url(http://www.blogblog.com/1kt/ethereal/bird-2toned-blue-fade.png) repeat-x scroll top left;}.comments .continue {border-top: 2px solid #dbdbdb;
>
>
>
>
> Please pass this along to whomever is responsible for he security of the *.
> blogspot.com servers
>
> Thanks kindly
>
> --
> You received this message because you are subscribed to the Google Groups
> "Blogger Developer Group" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at http://groups.google.com/group/bloggerdev.
> For more options, visit https://groups.google.com/d/optout.
>



-- 

Brett Morgan | Developer Relations Engineer, Google Maps |
[email protected] | profiles.google.com/brettmorgan

-- 
You received this message because you are subscribed to the Google Groups "Blogger Developer Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/bloggerdev.
For more options, visit https://groups.google.com/d/optout.