Hold the release!
gerv at mozilla.org
Sun Feb 16 12:03:44 UTC 2003
I've just written the test tool described in bug 192677
and, having tested it on a single template, I've already found one
instance where an incoming FORM variable is echoed directly in the
I'm having trouble exploiting it - not enough practice, perhaps. It's
the format parameter to query.cgi if anyone's interested; you need to
set query_format to a valid parameter to avoid getting an error.
Anyway, I think we should hold off for a couple of days while we get the
test checked in, and get people to split up the work of using it to
check all the templates.
More information about the developers