#717: Generating the current route with additional or changed arguments allows
code injections
----------------------+-----------------------------------------------------
Reporter: david | Owner: david
Type: defect | Status: closed
Priority: highest | Milestone: 0.11.1
Component: routing | Version: 0.11.1RC1
Severity: critical | Resolution: fixed
Keywords: | Has_patch: 0
----------------------+-----------------------------------------------------
Comment(by jackesnight):
<a href="http://www.tlnadurham.org/health-insurance-
rates.html">pennsylvania health insurance</a> zma <a
href="http://www.tlnadurham.org/home-insurance-rates.html";>home insurance
coverage</a> >:-((( <a
href="http://www.businesstaxcompliance.com/";>business insurance</a> %-)
--
Ticket URL: <http://trac.agavi.org/ticket/717#comment:6>
Agavi <http://www.agavi.org/>
An MVC Framework for PHP5
_______________________________________________
Agavi Tickets Mailing List
[email protected]
http://lists.agavi.org/mailman/listinfo/tickets
