From owner-freebsd-www  Tue Oct  3 12:51:54 2000
Delivered-To: freebsd-www@freebsd.org
Received: from baerenklau.de.freebsd.org (baerenklau.de.freebsd.org [195.185.195.14])
	by hub.freebsd.org (Postfix) with ESMTP id 0260E37B502
	for <www@FreeBSD.ORG>; Tue,  3 Oct 2000 12:51:47 -0700 (PDT)
Received: (from uucp@localhost)
	by baerenklau.de.freebsd.org (8.8.8/8.8.8) with UUCP id VAA27663;
	Tue, 3 Oct 2000 21:51:35 +0200 (CEST)
	(envelope-from w@panke.de.freebsd.org)
Received: (from w@localhost)
	by paula.panke.de.freebsd.org (8.9.3/8.8.8) id VAA04174;
	Tue, 3 Oct 2000 21:50:45 +0200 (CEST)
	(envelope-from w)
Date: Tue, 3 Oct 2000 21:50:44 +0200
From: Wolfram Schneider <bsd@panke.de.freebsd.org>
To: Dan Rench <drench@i-works.com>
Cc: www@FreeBSD.ORG
Subject: Re: Lack of HTML escaping in your 404 document (CSS vulnerablility)
Message-ID: <20001003215044.A4097@paula.panke.de.freebsd.org>
References: <Pine.BSF.4.21.0009261701220.17637-100000@matt.i-2.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <Pine.BSF.4.21.0009261701220.17637-100000@matt.i-2.com>; from drench@i-works.com on Tue, Sep 26, 2000 at 05:03:17PM -0500
Sender: owner-freebsd-www@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Fixed, thanks!!!

-Wolfram

On 2000-09-26 17:03:17 -0500, Dan Rench wrote:
> Try:
> 
> http://www.freebsd.org/<script>confirm('hello');</script>
-- 
Wolfram Schneider <wosch@freebsd.org> http://wolfram.schneider.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-www" in the body of the message