> On Aug 13, 2007 7:48 AM +0530 [EMAIL PROTECTED] said: > > Obviously, your blog doesn't allow any users to comment...
Even if a blog allows users to comment, it is still not a vulnerability. As per the report, blogspot.com allows the JavaScript in the blog. JavaScript is *not* allowed in the comments. Regards, Susam Pal http://susam.in/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
