On Jul 26, 2011 10:01 PM, "Steve Meyers" <[email protected]> wrote: > > On 7/26/11 9:49 PM, Ed Felt wrote: >> >> I work for the lds church and actually manage the lds.org and other servers. >> This is not an Apache web server. Also, the infrastructure is pretty >> complex. There are multiple servers involved though it looks like one >> server from the outside. There are several completely different projects >> and servers going through the same lds.org domain rule. The network and >> security layers (which I don't configure, I only admin the db and backend) >> are pretty complicated and I'm not even sure how much the security guys >> would let me say. Ill try to get more info on it tomorrow and see how much I >> can go in to it. > > > It doesn't appear to be a security issue. The question is if that's a valid way to do a URL -- leaving off the protocol. > > From my quick test, it appears to work: > > http://www.cougarboard.com/test-double-slash.html > > It should show the Google logo. It worked in Firefox 5.0 on the Mac. > > Steve
Of course it's not a security issue. I just don't know how much I'm allowed to say about our infrastructure. The css referred to might not even reside on the same lds.org server. Sorry if I wasn't clear. - Ed Felt _______________________________________________ UPHPU mailing list [email protected] http://uphpu.org/mailman/listinfo/uphpu IRC: #uphpu on irc.freenode.net
