Sec Bug->Bug #64379 [Opn]: PECL account application: double escaping bug
| From: | stas@php.net | Date: | Mon, 20 May 2013 07:01:43 +0000 |
| Subject: | Sec Bug->Bug #64379 [Opn]: PECL account application: double escaping bug | ||
| References: | 1 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-15876@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=64379&edit=1
ID: 64379
Updated by: stas@php.net
Reported by: marco at m-s-d dot eu
Summary: PECL account application: double escaping bug
Status: Open
-Type: Security
+Type: Bug
Package: Website problem
PHP Version: Irrelevant
Block user comment: N
Private report: Y
Previous Comments:
------------------------------------------------------------------------
[2013-03-07 19:22:15] marco at m-s-d dot eu
Description:
------------
The PECL account application form on pecl.php.net/account-request.php suffers from
a double-escape bug: the " character becomes escaped in plaintext emails, as can
be seen on http://news.php.net/php.pecl.dev/10430
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=64379&edit=1