Re: [Full-disclosure] Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities

[Jacqui Caren-home <jacqui.caren@xxxxxxxxxxxx>]

On 29/06/2011 02:40, Nick FitzGerald wrote:
> Christian Sciberras wrote:
>
>> Rather than that, I'd say the dev team is out of sync with the security
>> team..
>
> Assuming that that may be a reasonable one-sentence encapsulation of
> how Joomla development is organized...
>
> The fact such a sentence can be meaningfully utterred tells us there
> are major problems _inherent_ in Joomla.

What I find worrying is that I cannot see the test suite anywhere.
Have I misse dthe link, is it secret or non existent?

Jacqui

http://forum.joomla.org/viewtopic.php?f=681&t=624023&sid=e07f7a089ae6ca49291960fb1744de51

I would have thought they would be asking for help to migrate test into one of 
the free-to-use
CI systems available to floss projects.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/