projects / squirrelmail.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 35aaf66) | patch
Fix part 1 for XSS issue... call page like this:
authorjangliss <jangliss@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Sun, 28 Mar 2004 11:50:13 +0000 (11:50 +0000)
committerjangliss <jangliss@7612ce4b-ef26-0410-bec9-ea0150e637f0>
Sun, 28 Mar 2004 11:50:13 +0000 (11:50 +0000)
commit72520f77e8cd4d3416f07e0c0e9c1476eb99a713
treed11ee54b11edd4c1c6df427ece6584aa150cdf27tree | snapshot (zip tar.gz)
parent35aaf66653399a1e8e7e243e539dd35e2f3f5a1fcommit | diff
Fix part 1 for XSS issue... call page like this:

  src/compose.php?mailbox="><script>alert('Nuts!');</script>

Because this file is included in other pages, it could affect others too.

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@6911 7612ce4b-ef26-0410-bec9-ea0150e637f0
functions/page_header.php diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.