Re: Very serious security problem

"Arnaud Desitter" <[email protected]>
Newsgroups gmane.comp.web.html-tidy.user
Message-ID <[email protected]> 
After discussion with John, it turns out to be unrelated to HTML tidy.
Regards,

2008/11/18 John Haugeland <[email protected]>:
> We have become aware of a very serious XSS injection in HTML Tidy (several
> weeks late because securityfocus does not report defects to vendors, which
> is a significant problem of its own right.)  I am prepared to provide a
> trivial patch to close it.
>
>
>
> What is the appropriate process for reporting security defects in private,
> to allow the patch cycle to close the problem without aggravating it?
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.