About gitweb.cgi bug

2 messages, 2 authors, 2016-06-15 · open the first message on its own page

About gitweb.cgi bug

From: Tomasz bla Fortuna <hidden>
Date: 2016-06-15 22:41:55

  Hi,
I've found html injection bug:
http://www.kernel.org/git/gitweb.cgi?p=%3Cimg%20src=%22http://af.gliwice.pl/p.png%22%3Ecogito%2Fcogito.git;a=log
May lead to redirection to some pr0n sites using kernel.org address...
but its nothing.

Have a nice day,
  Tomasz bla Fortuna

Re: About gitweb.cgi bug

From: Kay Sievers <hidden>
Date: 2016-06-15 22:41:55

On Fri, 2005-04-29 at 15:23 +0200, Tomasz bla Fortuna wrote:
  Hi,
I've found html injection bug:
http://www.kernel.org/git/gitweb.cgi?p=%3Cimg%20src=%22http://af.gliwice.pl/p.png%22%3Ecogito%2Fcogito.git;a=log
May lead to redirection to some pr0n sites using kernel.org address...
but its nothing.
I've sent a fix for this to the kernel.org master.

Thanks,
Kay
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help