oss-sec mailing list archives

Re: XSS security issue in gitweb for 'blob_plain' view with HTML files

From: dave b <db.pub.mail () gmail com>
Date: Sat, 4 Jun 2011 06:03:32 +1000

I wasn't sure if the behaviour was intended or not.
I probably missed that that part of the documentation  :(

Current thread:

Security issue in gitweb Jamie Strandboge (Jun 03)
- Re: XSS security issue in gitweb for 'blob_plain' view with HTML files Jakub Narebski (Jun 03)
  - Re: XSS security issue in gitweb for 'blob_plain' view with HTML files dave b (Jun 03)
  - Re: XSS security issue in gitweb for 'blob_plain' view with HTML files Jakub Narebski (Jun 04)
    - Re: Re: XSS security issue in gitweb for 'blob_plain' view with HTML files Ludwig Nussel (Jun 14)
    - Re: [CVE-2011-2186] XSS security issue in gitweb for 'blob_plain' view with HTML files Jakub Narebski (Jun 14)
    - Re: [CVE-2011-2186] XSS security issue in gitweb for 'blob_plain' view with HTML files Ludwig Nussel (Jun 14)
    - [CVE-2011-2186] [PATCH] gitweb: Enable $prevent_xss by default Jakub Narebski (Jun 14)
- Re: Security issue in gitweb Josh Bressers (Jun 06)