Date: Tue, 26 Sep 2000 17:03:17 -0500 (CDT) From: Dan Rench <drench@i-works.com> To: www@freebsd.org Subject: Lack of HTML escaping in your 404 document (CSS vulnerablility) Message-ID: <Pine.BSF.4.21.0009261701220.17637-100000@matt.i-2.com>
next in thread | raw e-mail | index | archive | help
Try: http://www.freebsd.org/<script>confirm('hello');</script>; To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-www" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0009261701220.17637-100000>