Re: [PATCH] Fix XSS vulnerabilites in madison.php

2008-05-12 Thread Thijs Kinkhorst
Hi Chris, On Monday 12 May 2008 14:28, Chris Lamb wrote: > I have attached a patch that fixes some cross-site scripting vulnerabilites > in http://qa.debian.org/madison.php. Good work. Since the page is in UTF-8, it's better to use htmlspecialchars() than htmlentities(), because the latter tends

[PATCH] Fix XSS vulnerabilites in madison.php

2008-05-12 Thread Chris Lamb
Hi, I have attached a patch that fixes some cross-site scripting vulnerabilites in http://qa.debian.org/madison.php. Regards, -- Chris Lamb, UK [EMAIL PROTECTED] GPG: 0x634F9A20 Index: wml/madison