[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87pqd0f582.fsf@mid.deneb.enyo.de>
Date: Mon, 27 Feb 2012 20:26:05 +0100
From: Florian Weimer <fw@...eb.enyo.de>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: smokeping XSS
* Vincent Danen:
> https://bugzilla.redhat.com/show_bug.cgi?id=783584
Is the patch
https://bugzilla.redhat.com/attachment.cgi?id=556619
really correct? It does not strip the two magic characters "=
(" should be enough, = is just defensive), so it's probably still
possible to inject an onmouseover handler and CSS which enlarges the
affected HTML element so that the handler is practically guaranteed to
fire.
I've just looked at the patch, I haven't got a (patched or unpatched)
smokeping instance to test this.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
