From owner-freebsd-www  Tue Sep 26 15: 3:33 2000
Delivered-To: freebsd-www@freebsd.org
Received: from matt.i-2.com (matt.i-2.com [208.178.209.3])
	by hub.freebsd.org (Postfix) with SMTP id 84BD237B422
	for <www@freebsd.org>; Tue, 26 Sep 2000 15:03:23 -0700 (PDT)
Received: (qmail 17677 invoked by uid 1004); 26 Sep 2000 22:03:17 -0000
Received: from localhost (sendmail-bs@127.0.0.1)
  by localhost with SMTP; 26 Sep 2000 22:03:17 -0000
Date: Tue, 26 Sep 2000 17:03:17 -0500 (CDT)
From: Dan Rench <drench@i-works.com>
X-Sender: drench@matt.i-2.com
To: www@freebsd.org
Subject: Lack of HTML escaping in your 404 document (CSS vulnerablility)
Message-ID: <Pine.BSF.4.21.0009261701220.17637-100000@matt.i-2.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-www@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Try:

http://www.freebsd.org/<script>confirm('hello');</script>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-www" in the body of the message