[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] BLOGGER XSS VULNERABILITY
- To: Valdis.Kletnieks@xxxxxx
- Subject: Re: [Full-disclosure] BLOGGER XSS VULNERABILITY
- From: Susam Pal <susam@xxxxxxxx>
- Date: Sun, 12 Aug 2007 22:39:02 -0700
> On Aug 13, 2007 7:48 AM +0530 Valdis.Kletnieks@xxxxxx said:
>
> Obviously, your blog doesn't allow any users to comment...
Even if a blog allows users to comment, it is still not a
vulnerability. As per the report, blogspot.com allows the
JavaScript in the blog. JavaScript is *not* allowed in the
comments.
Regards,
Susam Pal
http://susam.in/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/