[Gllug] css question

[Russell Howe]

On Tue, Dec 06, 2005 at 04:51:18AM -0500, Andrew Farnsworth wrote:
> Ok, so much for reading my email via a web browser :-)  Talk about messing with someone's mind.  That came through in huge red type the everone across the room could read.  Kinda reminds me of the newby html author searching for help on how to write html pages and searching the web for "html"...

Sounds like your webmail application is vulnerable to cross-site
scripting attacks, then.

It should replace all angle brackets and other characters considered
'special' by HTML with character entities if it's rendering your emails
as HTML for display via a brower.

-- 
Russell Howe       | Why be just another cog in the machine,
rhowe at siksai.co.uk | when you can be the spanner in the works?
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug