urosm
/
ikiwiki
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix typo: s/insertation/insertion/g

master
Josh Triplett 2011-03-09 11:28:38 -08:00
parent f486cf6b77
commit 30d1de4bbd
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/security.mdwn
View File

@ -441,7 +441,7 @@ A fix was also backported to Debian etch, as version 2.53.5. I recommend
upgrading to one of these versions if your wiki can be edited by third upgrading to one of these versions if your wiki can be edited by third
parties. parties.
## javascript insertation via insufficient htmlscrubbing of comments ## javascript insertion via insufficient htmlscrubbing of comments
Kevin Riggle noticed that it was not possible to configure Kevin Riggle noticed that it was not possible to configure
`htmlscrubber_skip` to scrub comments while leaving unscubbed the text `htmlscrubber_skip` to scrub comments while leaving unscubbed the text
@ -454,7 +454,7 @@ preview or moderation of comments with such a configuration.
These problems were discovered on 12 November 2010 and fixed the same These problems were discovered on 12 November 2010 and fixed the same
hour with the release of ikiwiki 3.20101112. ([[!cve CVE-2010-1673]]) hour with the release of ikiwiki 3.20101112. ([[!cve CVE-2010-1673]])
## javascript insertation via insufficient checking in comments ## javascript insertion via insufficient checking in comments
Dave B noticed that attempting to comment on an illegal page name could be Dave B noticed that attempting to comment on an illegal page name could be
used for an XSS attack. used for an XSS attack.