[Full-disclosure] [FDSA] Notepad Highly Critical Cross-Site Scripting (XSS) Vulnerability

BlackHawk hawkgotyou at gmail.com
Thu Jan 17 20:12:03 GMT 2008


> ======
> 4) Fix
> ======

> Notepad should be rewritten to filter potentially dangerous
> characters. Characters can be converted to their html encoded
> equivalents.

translated: you CAN'T write pages in HTML with any program..

>Fredrick Diggle Security Services is probably the best application
>security researchers on the scene this month. They have identified
>several hundred thousand vulnerabilities this week[..]

i think you must read this: http://www.amazon.com/PCs-Dummies-Quick-Reference-Gookin/dp/0764507222


--
Best regards,
 BlackHawk                            mailto:hawkgotyou at gmail.com




Full-Disclosure is hosted and sponsored by Secunia.