Re: hmmm
This WebDNA talk-list message is from 2006
It keeps the original formatting.
numero = 67357
interpreted = N
texte = Knowing the WebDNA parsing engine, I doubt this is the case. If any one has time and wants to add all the contexts to my Rewrite Rule, that'd be nice. On May 31, 2006, at 10:08 AM, John Peacock wrote: >> It's a _huge_ security concern. > > I've confirmed through testing with the "Examples" page that any > paired context ([context]something[/context]) can be broken by > passing a null value as a URL value. If you use exclusively POST > and not GET pages, you may be immune from this behavior (but it > depends on your web server, since some will happily pass along URL > parameters even to a POST). -- Jesse Proudman Blue Box Group, LLC p. +1.800.613.4305 x801 e. jesse@blueboxgrp.com ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Knowing the WebDNA parsing engine, I doubt this is the case. If any one has time and wants to add all the contexts to my Rewrite Rule, that'd be nice. On May 31, 2006, at 10:08 AM, John Peacock wrote: >> It's a _huge_ security concern. > > I've confirmed through testing with the "Examples" page that any > paired context ([context]something[/context]) can be broken by > passing a null value as a URL value. If you use exclusively POST > and not GET pages, you may be immune from this behavior (but it > depends on your web server, since some will happily pass along URL > parameters even to a POST). -- Jesse Proudman Blue Box Group, LLC p. +1.800.613.4305 x801 e. jesse@blueboxgrp.com ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Jesse Proudman
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
no global [username] or [password] displayed ... (1997)
PCS Emailer's role ? (1997)
-REPOST- WebCat 3 & Aliases (2000)
complete escaped ascii chart - importing and exporting filesquestion (1998)
Announce: Bug fix talk list (1999)
[OT] friday pics :-) (2005)
PCS Frames (1997)
[WebDNA] How does WebMerchant ... (2015)
WebCat2final1 crashes (1997)
Nested vs conditional (1997)
Dreamweaver and WebDNA (2003)
math a various prices (1997)
Silly date question (2006)
Template Cache problem, bombing WebSTAR problem (2000)
3RD POST Character limit in [Search]? (1998)
SendNews (1999)
Permissions Ignored - PLEASE HELP (2003)
[WebDNA] I'm stuck... :-( (2009)
loops (2000)
Faxing orders in place of email (1997)