Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability May 16 2008 09:44AM
Jon Ribbens jon+bugtraq2 (at) unequivocal.co (dot) uk [email concealed] (jon+bugtraq2 unequivocal co uk)
On Wed, May 14, 2008 at 05:20:52PM -0000, Tom.Donovan (at) acm (dot) org [email concealed] wrote:
> It appears there is little that web servers can do to thwart this,
> short of changing all '+' characters to %2B. That seems excessive.

To be fair, this is what Microsoft has recommended, explicitly for the
purpose of preventin...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus