[galaxy-dev] Galaxy prone to XSS and HTML injection attacks

2011-03-19 Thread Paul, Rohit (NIH/NCI) [C]
We recently ran a Nessus vulnerability scan against our server that hosts a local installation of Galaxy. The scan report showed that the web application is vulnerable to XSS and HTML injection attacks. In order to determine if/when these vulnerabilities will be fixed, where should I either

Re: [galaxy-dev] Galaxy prone to XSS and HTML injection attacks

2011-03-19 Thread Dannon Baker
I'd be happy to review the scan results, feel free to send them to me. I'll share it with the rest of the team as well. Thanks! -Dannon On Mar 19, 2011, at 11:37 AM, Paul, Rohit (NIH/NCI) [C] wrote: We recently ran a Nessus vulnerability scan against our server that hosts a local