Re: [galaxy-dev] xml file display problem

2014-05-08 Thread Hans-Rudolf Hotz
Hi John Thank you very much for the explanation. I will discuss it with our sys-admin Hans-Rudolf On 05/08/2014 03:29 PM, John Chilton wrote: I broke your Galaxy and did so intentionally - I feel bad about that. The way Galaxy was serving out XML content allowed XSS attacks between users -

Re: [galaxy-dev] xml file display problem

2014-05-08 Thread John Chilton
I broke your Galaxy and did so intentionally - I feel bad about that. The way Galaxy was serving out XML content allowed XSS attacks between users - http://dev.list.galaxyproject.org/using-svg-foreignObject-tags-can-circumvent-html-sanitization-td4663390.html. If you aren't running a public insta