|
Software
»
Javascript
»
DWR
»
DWR - Users
Security Issue
View:
Threaded
Chronologically
All Messages
New views
1 Messages —
Rating Filter:
0
1
2
3
4
5
Alert me
Security Issue
by Joe Walker-3
:: Rate this Message:
Reply to Author
|
View Threaded
|
Show Only this Message
We've found and fixed (we think) a security hole in DWR. It's an XSS attack.
The release candidate for 2.0.5 is here:
https://dwr.dev.java.net/servlets/ProjectDocumentList?folderID=9420
I'm hoping to release it by the end of the week.
It would be very helpful if people could throw this jar file into their web-apps to see if anything breaks.
Thanks,
Joe.
LightInTheBox
- Buy quality products at
wholesale
price
Free Forum
Powered by Nabble
Forum Help