#717: Generating the current route with additional or changed arguments allows
code injections
----------------------+-----------------------------------------------------
Reporter: david | Owner: david
Type: defect | Status: closed
Priority: highest | Milestone: 0.11.1
Component: routing | Version: 0.11.1RC1
Severity: critical | Resolution: fixed
Keywords: | Has_patch: 0
----------------------+-----------------------------------------------------
Comment(by mortypoo):
<a href="http://www.yourinsurer.net/";>life insurance quote</a> 125476 <a
href="http://www.insurethehouse.net/";>car insurance</a> rzpj <a
href="http://www.oldstylelist.com/";>cheapest car insurance</a> 75567 <a
href="http://www.findinsur.net/";>auto insurance</a> 19258
--
Ticket URL: <http://trac.agavi.org/ticket/717#comment:6>
Agavi <http://www.agavi.org/>
An MVC Framework for PHP5
_______________________________________________
Agavi Tickets Mailing List
[email protected]
http://lists.agavi.org/mailman/listinfo/tickets
