Re: XSS in Manpage Search

Javier Fernandez-Sanguino <[email protected]>
Newsgroups gmane.linux.debian.devel.www
Message-ID <CAB9B7UvBv=tQA_fCfkexJHNeEY-yZettON3139NQdiYtKrxTwA@mail.gmail.com> 
On 17 July 2015 at 22:38, Gary McAdam <[email protected]> wrote:

> Hi,
>
> I found an XSS vulnerability on the manage search page.
>
>
Sorry for the delay. I've committed a fix to the server just now. I would
appreciate if you could try it out and stress test it a little bit.

I have yet to commit the changes to SVN, as my network connection is not
great, but the fixed code should be available in the DDP SVN [1] soon.

Best regards

Javier

[1] https://anonscm.debian.org/viewvc/ddp/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.