|
[dokuwiki]
||
[Date Prev]
[09-2006 Date Index]
[Date Next]
||
[Thread Prev]
[09-2006 Thread Index]
[Thread Next]
[dokuwiki] Re: SECURITY WARNING
- From: Chris Smith <chris@xxxxxxxxxxxxx>
- To: dokuwiki@xxxxxxxxxxxxx
- Date: Fri, 08 Sep 2006 13:55:43 +0100
Chris Smith wrote:
It was Sep 3, darcs version I was using, so no its not done properly
in the current version.
Apologies, all characters that aren't allowed in an IP address are
stripped. I added a test case using the string from the exploit and it
doesn't get returned, although an invalid IP address is returned. I'll
send a patch + test case.
Cheers,
Chris
--
DokuWiki mailing list - more info at
http://wiki.splitbrain.org/wiki:mailinglist
|
|
