Your welcome.
Looking forward and trying to contribute more. This is my first open source
contribution, so consider me as a newbie in terms of processes and best
practises.
Let's see :)

2017-01-05 9:47 GMT+01:00 Jacopo Cappellato <[email protected]>:

> On Tue, Jan 3, 2017 at 4:15 PM, Christoph Rüger <[email protected]>
> wrote:
>
> > +1
> >
> > watch out for security / template injection attacks: e.g. see
> > http://blog.portswigger.net/2015/08/server-side-template-injection.html
> >
> > set
> >
> > configuration.setNewBuiltinClassResolver(TemplateClassResolver.
> > ALLOWS_NOTHING_RESOLVER);
> >
> >
> Thank you Christoph, much appreciated.
> And many thanks for filing the ICLA for FreeMarker (we have received it
> yesterday) and for your help to the project!
>
> Jacopo
>



-- 
Christoph Rüger, Geschäftsführer
Synesty <https://synesty.com/> - Automatisierung, Schnittstellen, Datenfeeds
Tel.: +49 3641/559649

Xing: https://www.xing.com/profile/Christoph_Rueger2
LinkedIn: http://www.linkedin.com/pub/christoph-rueger/a/685/198

-- 
Synesty GmbH
Moritz-von-Rohr-Str. 1a
07745 Jena
Tel.: +49 3641 559649
Fax.: +49 3641 5596499
Internet: http://synesty.com

Geschäftsführer: Christoph Rüger
Unternehmenssitz: Jena
Handelsregister B beim Amtsgericht: Jena
Handelsregister-Nummer: HRB 508766
Ust-IdNr.: DE287564982

Reply via email to