Re: [tor-bugs] #10440 [Website]: Cross Site Scripting at TorProject Blog

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#10440: Cross Site Scripting at TorProject Blog
-------------------------+-------------------------------------------------
     Reporter:           |      Owner:  Patryk Bogdan
  patryk.bogdan@â        |     Status:  new
         Type:  defect   |  Milestone:
     Priority:  major    |    Version:
    Component:  Website  |   Keywords:  xss blog torproject cross site
   Resolution:           |  scripting
Actual Points:           |  Parent ID:
       Points:           |
-------------------------+-------------------------------------------------

Comment (by bastik):

 NoScript saved me, however unprotected browsers read ''the number of the
 beast'' (666). (Could be much worser)

 Since some change in Trac settings I can't add someone else to CC or
 change the owner. Phobos would be "responsible" as far as I can tell.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10440#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs