Re: Sendpage (Perl CGI) Remote Execution Vulnerability

From: Seth Arnold (sarnoldat_private)
Date: Wed Nov 28 2001 - 12:59:30 PST

  • Next message: John Scimone: "Re: Audiogalaxy again (Cross Site Scripting Vuln)"

    On Wed, Nov 28, 2001 at 09:24:30AM +0000, John Imrie wrote:
    > > 	$message =~ s/[^\w\s]//g;
    > $message =~ s/[^A-Za-z0-9]//g;
    
    Note that these two are almost identical in the default locale, but the
    first version also allows whitespace (maybe useful :) and more
    international-friendly characters such as: αξεοιαπ ....
    
    Cheers
    
    -- 
    "Soldiers quartered in a populous town will always occasion two mobs
    where they prevent one. They are wretched conservators of the peace."
    -- John Adams
    
    
    



    This archive was generated by hypermail 2b30 : Wed Nov 28 2001 - 14:07:45 PST