Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror

Comment A more detailed explanation: (Score 3, Interesting) 90

The vulnerability is related to this:
https://www.zerodayinitiative....

"As you can see, the steps for parsing content at processing time are very similar to the parsing steps at verification time. However, there is a critical one-line difference:

            text4 = HttpUtility.HtmlDecode(text4);

At processing time, attribute values are HTML-decoded by the parser, but there is no corresponding line at verification time. This means that if we have an ASPX tag with an attribute such as runat="erver", the EditingPageParser.VerifyControlOnSafeList() function will not consider it a server-side control and will not check it for safety. At processing time, however, it will be recognized and executed as a server-side control."

And the story today ...
https://research.eye.security/...

Comment wow, quite impressive (Score 2) 201

No, I'm not thinking about the stats between the MB record against Lucid.

I'm talking about the record using Imperial units, Instead of metric, for a news item from Europe! From the colonists!

Take a look under the bonnet, will you. I am 100 certain that the imminent dupe will resist any attempt at correcting the oversight. Sleepy eds, what else would you call it

Slashdot Top Deals

Logic is the chastity belt of the mind!

Working...