[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    Re: [oss-security] CVE request: smokeping XSS
From:       Florian Weimer <fw () deneb ! enyo ! de>
Date:       2012-02-27 19:26:05
Message-ID: 87pqd0f582.fsf () mid ! deneb ! enyo ! de
[Download RAW message or body]

* Vincent Danen:

> https://bugzilla.redhat.com/show_bug.cgi?id=783584

Is the patch

https://bugzilla.redhat.com/attachment.cgi?id=556619

really correct?  It does not strip the two magic characters "=
(" should be enough, = is just defensive), so it's probably still
possible to inject an onmouseover handler and CSS which enlarges the
affected HTML element so that the handler is practically guaranteed to
fire.

I've just looked at the patch, I haven't got a (patched or unpatched)
smokeping instance to test this.
[prev in list] [next in list] [prev in thread] [next in thread]