[Nms-cgi-devel] Re: [Nms-cgi-commits] CVS Commit

[Nick C. <ni...@cl...>]

On Sat, Aug 24, 2002 at 01:26:25AM -0700, Nick Cleaton wrote:
> 
> Modified Files:
> 	README wwwboard.pl 
> Log Message:
> * inlined CGI::NMS::Charset into wwwboard.pl, and started on patching
>   the XSS holes in wwwboard.

I've inlined CGI::NMS::Charset by hand for now.  I'll whack up a
script to update the inlined copy of the module from the master
sources later.

XSS isn't yet fully patched, this is still alpha.

I've also disabled $allow_html until such time as it's implemented
in an XSS-free way.  

I thought I'd use wwwboard as a testbed for the inlining of modules,
since it's the most broken script.

--
Nick