[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

CVS: cvs.openbsd.org: src



CVSROOT:	/cvs
Module name:	src
Changes by:	claudio_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org	2007/10/10 07:23:40

Modified files:
	usr.bin/bgplg  : bgplg.c 

Log message:
Limit the allowed characters in a request to [a-zA-Z0-9-_.:/= ] everything
else will cause an "invalid character in input" error.
Fixes xss issue noticed by Anton Karpov.
OK henning@, sthen@



Visit your host, monkey.org