#717: Generating the current route with additional or changed arguments allows
code injections
----------------------+-----------------------------------------------------
 Reporter:  david     |        Owner:  david    
     Type:  defect    |       Status:  closed   
 Priority:  highest   |    Milestone:  0.11.1   
Component:  routing   |      Version:  0.11.1RC1
 Severity:  critical  |   Resolution:  fixed    
 Keywords:            |    Has_patch:  0        
----------------------+-----------------------------------------------------

Comment(by BabeRuthy):

 <a href="http://www.tlnadurham.org/auto-insurance-rates.html";>auto owners
 insurance</a> 4348 <a href="http://www.bloginwi.com/auto-
 insurance.html">auto insurance</a> 46432 <a href="http://www.bloginwi.com
 /home-insurance.html">home insurance</a> 8-PPP <a
 href="http://www.businesstaxcompliance.com/";>small business insurance
 rates</a> %-[[

-- 
Ticket URL: <http://trac.agavi.org/ticket/717#comment:7>
Agavi <http://www.agavi.org/>
An MVC Framework for PHP5



_______________________________________________
Agavi Tickets Mailing List
[email protected]
http://lists.agavi.org/mailman/listinfo/tickets

Reply via email to