[Full-disclosure] [FDSA] Notepad Highly Critical Cross-Site Scripting (XSS) Vulnerability
BlackHawk
hawkgotyou at gmail.com
Thu Jan 17 20:12:03 GMT 2008
> ======
> 4) Fix
> ======
> Notepad should be rewritten to filter potentially dangerous
> characters. Characters can be converted to their html encoded
> equivalents.
translated: you CAN'T write pages in HTML with any program..
>Fredrick Diggle Security Services is probably the best application
>security researchers on the scene this month. They have identified
>several hundred thousand vulnerabilities this week[..]
i think you must read this: http://www.amazon.com/PCs-Dummies-Quick-Reference-Gookin/dp/0764507222
--
Best regards,
BlackHawk mailto:hawkgotyou at gmail.com
Full-Disclosure is hosted and sponsored by Secunia.