CVS: cvs.openbsd.org: src

[Miod Vallat <miod_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>]

CVSROOT:	/cvs
Module name:	src
Changes by:	miod_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2002/10/07 15:44:45

Modified files:
	usr.sbin/httpd/src/main: Tag: OPENBSD_3_0 http_core.c 

Log message:
MFC (henning):
fix a cross-site scripting vuln:
*) SECURITY: CAN-2002-0840 (cve.mitre.org)
Prevent a cross-site scripting vulnerability in the default
error page.  The issue could only be exploited if the directive
UseCanonicalName is set to Off and a server is being run at
a domain that allows wildcard DNS.  [Matthew Murphy]