Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
d1b
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
4 ms
·
1.
▲
by
d1b
15y ago
Actually _right_now_ I cannot click "more"(on the first page) without hitting the "Unknown or expired link" page ... so I cannot go past the first page :/ -- Someone should submit a patch :)
2.
▲
Please get the security of (your) web admin applications correct the first time!
(blog.mu-cs.com)
1 points
by
d1b
15y ago
|
0 comments
3.
▲
Copying and pasting from untrusted sources can be harmful.
(blog.mu-cs.com)
2 points
by
d1b
15y ago
|
0 comments
4.
▲
by
d1b
16y ago
I think in the github and launchpad case the security that a WAF normally offers would have been broken because the data to trigger the vector did not come through http nor https. I suggest you have a play around with github wiki's they alr
5.
▲
by
d1b
16y ago
this isn't going to fix anything that wouldn't be fixed via ensuring that stuff is escaped already on the page...
6.
▲
by
d1b
16y ago
I spent about around 3 hours on github(found the bugs after like 2 hours and spent another 1 playing with wiki markup --- it is sanitized don't bother), 1 hour on bitbucket, 30minutes on gitorious(obviously the bug I found was found very qu