#1452 [NEW]: Htmlentities in PEPr proposal (vote comments)
| From: | bmansion at mamasam dot com | Date: | Thu, 20 May 2004 12:10:36 +0000 |
| Subject: | #1452 [NEW]: Htmlentities in PEPr proposal (vote comments) | ||
| Groups: | php.pear.webmaster | ||
| Request: | Send a blank email to pear-webmaster+get-2417@lists.php.net to get a copy of this message | ||
From: bmansion at mamasam dot com
Operating system:
PHP version: Irrelevant
Package: Web Site
Bug description: Htmlentities in PEPr proposal (vote comments)
Description:
------------
Once again, there is a problem with htmlentities not being used in PEPr.
This makes us at the mercy of a script kiddie using cross-side scripting
(woooow, scary !)
Reproduce code:
---------------
http://pear.php.net/pepr/pepr-vote-show.php?id=72&handle=mansion
--
Edit bug report at http://pear.php.net/bugs/bug.php?id=1452&edit=1
--