On Sunday 09 May 2010 23:33:20, ki...@kirpi.it wrote :
> Just found: http://twitter.com/mushy99/statuses/13634155996
> Is it of any interest?
> 

Indeed, that's a way to insert potentially harmful JavaScripts in the page. I 
have immediately fixed it and just released version 2.2.16.

The report says:
  2010-04-19: Vendor contacted
  The vendor has been contacted, but has not replied to my report.

I assume that they e-mailed to Patrick but unfortunately he didn't notice or 
was too busy to forward the report to me.

Thanks,
Petko

_______________________________________________
pmwiki-devel mailing list
pmwiki-devel@pmichaud.com
http://www.pmichaud.com/mailman/listinfo/pmwiki-devel

Reply via email to