Need advice about server-side actions

Lukas Krejci lkrejci at redhat.com
Thu Jun 23 14:29:27 UTC 2011


https://bugzilla.redhat.com/show_bug.cgi?id=535570

I think that could work well here as well.

On Thursday, June 23, 2011 14:49:19 John Mazzitelli wrote:
>  > We'd have to think about security constraints but
>  > actually I can't see any ATM.
> 
> When Ian talks about security constraints, he's referring to XSS
> attacks. We did a lot of work (actually, IAN did a lot of work :)
> cleaning up the UI for this. For example, we want to avoid having things
> like this show up in the UI in an HTML context:
> 
> <script type="text/javascript">
> document.write('<b>Hello World</b>');
> </script>
> 
> So, that's what is being referred to when "security" issues are being
> referred to here.
> _______________________________________________
> rhq-devel mailing list
> rhq-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/rhq-devel


More information about the rhq-devel mailing list