d1b

4 ms·

1. 1.▲
   by d1b 15y ago

   Actually _right_now_ I cannot click "more"(on the first page) without hitting the "Unknown or expired link" page ... so I cannot go past the first page :/ -- Someone should submit a patch :)
2. 2.▲
   Please get the security of (your) web admin applications correct the first time!(blog.mu-cs.com)

   1 points by d1b 15y ago|0 comments
3. 3.▲
   Copying and pasting from untrusted sources can be harmful.(blog.mu-cs.com)

   2 points by d1b 15y ago|0 comments
4. 4.▲
   by d1b 16y ago

   I think in the github and launchpad case the security that a WAF normally offers would have been broken because the data to trigger the vector did not come through http nor https. I suggest you have a play around with github wiki's they alr
5. 5.▲
   by d1b 16y ago

   this isn't going to fix anything that wouldn't be fixed via ensuring that stuff is escaped already on the page...
6. 6.▲
   by d1b 16y ago

   I spent about around 3 hours on github(found the bugs after like 2 hours and spent another 1 playing with wiki markup --- it is sanitized don't bother), 1 hour on bitbucket, 30minutes on gitorious(obviously the bug I found was found very qu