Re: [LMMS-devel] XSS in your Project in regarding

2014-07-16 Thread Tres Finocchiaro
@Raine, Thanks for the valuable information. I can examine the code if someone is willing to grant proper access. -Tres - tres.finocchi...@gmail.com On Wed, Jul 16, 2014 at 7:27 AM, Raine M. Ekman wrote: > Quoting Tres Finocchiaro : > > > Php can check the header and block requests from 3rd

Re: [LMMS-devel] XSS in your Project in regarding

2014-07-16 Thread Raine M. Ekman
Quoting Tres Finocchiaro : > Php can check the header and block requests from 3rd party domains (modern > web browsers actually do this automatically unless the site explicitly > allow cross domain resources), but I don't have access to see our current > site and it would be my first time doing th

Re: [LMMS-devel] XSS in your Project in regarding

2014-07-16 Thread Tres Finocchiaro
Php can check the header and block requests from 3rd party domains (modern web browsers actually do this automatically unless the site explicitly allow cross domain resources), but I don't have access to see our current site and it would be my first time doing this. Furthermore, I don't think this

Re: [LMMS-devel] XSS in your Project in regarding

2014-07-16 Thread Lukas W.
While I got access to the website and fixed some issues here and there, I hardly know anything about PHP, XSS, or the old LSP, unfortunately. I'd have to take a closer look at each of these first. However I can do this next Tuesday at the earliest. I'll be away until then. - Lukas 2014-07-16 10:

Re: [LMMS-devel] XSS in your Project in regarding

2014-07-16 Thread Vesa
On 07/15/2014 04:25 PM, gameFace22 wrote: > Hello, > > I was going through SourceForge for downloading PyDev Plugin and I > encountered CrossSiteScripting vulnerability in certain domains which > is hosted by SourceForge. I am including the links which has the > vulnerability,preventive measures