@Raine,
Thanks for the valuable information. I can examine the code if someone is
willing to grant proper access.
-Tres
- tres.finocchi...@gmail.com
On Wed, Jul 16, 2014 at 7:27 AM, Raine M. Ekman wrote:
> Quoting Tres Finocchiaro :
>
> > Php can check the header and block requests from 3rd
Quoting Tres Finocchiaro :
> Php can check the header and block requests from 3rd party domains (modern
> web browsers actually do this automatically unless the site explicitly
> allow cross domain resources), but I don't have access to see our current
> site and it would be my first time doing th
Php can check the header and block requests from 3rd party domains (modern
web browsers actually do this automatically unless the site explicitly
allow cross domain resources), but I don't have access to see our current
site and it would be my first time doing this. Furthermore, I don't think
this
While I got access to the website and fixed some issues here and there, I
hardly know anything about PHP, XSS, or the old LSP, unfortunately. I'd
have to take a closer look at each of these first. However I can do this
next Tuesday at the earliest. I'll be away until then.
- Lukas
2014-07-16 10:
On 07/15/2014 04:25 PM, gameFace22 wrote:
> Hello,
>
> I was going through SourceForge for downloading PyDev Plugin and I
> encountered CrossSiteScripting vulnerability in certain domains which
> is hosted by SourceForge. I am including the links which has the
> vulnerability,preventive measures