Re: Fwd: XSS evasion

2006-10-08 Thread Clinton Gormley
> HTML::Scrubber is not really broken. The problem is that the > documentation leads the user to do broken things, as was shown with > Planet Plagger. It is possible to make a secure HTML::Scrubber config, > but you need to default deny everything and then only allow a select > list of tags and

Re: Fwd: XSS evasion

2006-10-08 Thread mock
On Fri, Oct 06, 2006 at 07:25:06PM +0200, Clinton Gormley wrote: > On Fri, 2006-10-06 at 18:48 +0200, Hendrik Van Belleghem wrote: > > "mock" talked about XSS at this years YAPC::Europe in Birmingham a few > > weeks ago. He had quite a few examples. His slides are at > > http://sketchfactory.com/st

child pid 28464 exit signal Segmentation fault (11)

2006-10-08 Thread Cyril SCETBON
Hi people, I get this error message int error.log when I try to access a perl script which exists or not. I've turned on trace messages in mod_perl and here is my error.log : [Sun Oct 08 17:19:39 2006] [notice] Apache/2.0.55 (Ubuntu) mod_ssl/2.0.55 OpenSSL/0.9.8a mod_perl/2.0.2 Perl/v5.8.7 c