[elvystrac] [Elvys] #73: Code Injection/Cross Site Scripting (XSS)
- From: "Elvys" <elvys@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 08 Nov 2008 14:00:16 -0000
#73: Code Injection/Cross Site Scripting (XSS)
-----------------------+----------------------------------------------------
Reporter: DavidK | Owner: DavidK
Type: task | Status: new
Priority: critical | Milestone: Elvys v0.4
Component: webServer | Version:
Keywords: |
-----------------------+----------------------------------------------------
nektera mista nejsou odolna proti XSS. Treba v planovaci komponente lze
naplanovat staticky/dynamicky text, ktery obsahuje HTML tagy. Ty se pri
zobrazeni vykonavaji. Spousteni javascriptu z tohoto textu se nepodarilo,
mozna to JSF blokuje.
--
Ticket URL: <http://elvys.farm.particle.cz/trac/ticket/73>
Elvys <http://elvys.farm.particle.cz/trac/>
Elektronicky vyveskovy system
Other related posts:
