Re: [PATCH] Fix XSS vulnerabilites in madison.php

2008-05-12 Thread Thijs Kinkhorst
Hi Chris, On Monday 12 May 2008 14:28, Chris Lamb wrote: > I have attached a patch that fixes some cross-site scripting vulnerabilites > in http://qa.debian.org/madison.php. Good work. Since the page is in UTF-8, it's better to use htmlspecialchars() than htmlentities(), because the latter tends

[PATCH] Fix XSS vulnerabilites in madison.php

2008-05-12 Thread Chris Lamb
Hi, I have attached a patch that fixes some cross-site scripting vulnerabilites in http://qa.debian.org/madison.php. Regards, -- Chris Lamb, UK [EMAIL PROTECTED] GPG: 0x634F9A20 Index: wml/madison

Bug#480849: Please list Package-Arch-Specific entry on PTS page

2008-05-12 Thread riku . voipio
Package: qa.debian.org Severity: wishlist http://cvs.debian.org/srcdep/Packages-arch-specific?root=dak&view=markup This information is already listed in Jeroen's buildd status[1], but I think it would be a good idea to have it on the PTS page as well, as quite few maintainers seem to be aware tha