Re: [pear-webmaster] rasmus's magic tool
| From: | Helgi Þormar | Date: | Mon, 09 May 2005 08:03:37 +0000 |
| Subject: | Re: [pear-webmaster] rasmus's magic tool | ||
| References: | 1 | Groups: | php.pear.webmaster |
| Request: | Send a blank email to pear-webmaster+get-4074@lists.php.net to get a copy of this message | ||
On Mon, 2005-05-09 at 01:10 -0400, Lukas Smith wrote:
> [01:07] <Rasmus> This is the output from running it on the top page of
> pear.php.net
> [01:07] <Rasmus> get http://pear.php.net//<test_xsswëžËópÆ*CÏø4l
> ´¾>/?
> [01:07] <Rasmus> Raw tags are echoed back unfiltered
> [01:07] <Rasmus> <p>The requested document <i>//<test_xss>
> [01:08] <Rasmus> might want to htmlentity that
Thanks, I've been doing a bit cleanup, backporting Rasmus fixes to
bugsweb over to pear and peclweb plus some other fixes, will look into
this one also if it's not fixed already.
I'll do couple of tests and commit soon.
- Helgi