problem to translate DSA 125 in french

2002-04-26 Thread Martin Quinson
Hello, We have an ongoing effort to keep all DSA translated to french. But we have a problem with the DSA125: Yuji Takahashi discovered a bug in analog which allows a cross-site scripting type attack. It is easy for an attacker to insert arbitrary strings into any web server logfile. If

Re: problem to translate DSA 125 in french

2002-04-26 Thread Andrew Pimlott
On Fri, Apr 26, 2002 at 08:59:50AM +0200, Martin Quinson wrote: What is a cross-site scripting type attack ? One of the first analyses was published by Marc Slemko of the Apache Group at http://httpd.apache.org/info/css-security/ . You'll probably have to read the CERT links on that page as

problem to translate DSA 125 in french

2002-04-26 Thread Martin Quinson
Hello, We have an ongoing effort to keep all DSA translated to french. But we have a problem with the DSA125: Yuji Takahashi discovered a bug in analog which allows a cross-site scripting type attack. It is easy for an attacker to insert arbitrary strings into any web server logfile. If

Re: problem to translate DSA 125 in french

2002-04-26 Thread Andrew Pimlott
On Fri, Apr 26, 2002 at 08:59:50AM +0200, Martin Quinson wrote: What is a cross-site scripting type attack ? One of the first analyses was published by Marc Slemko of the Apache Group at http://httpd.apache.org/info/css-security/ . You'll probably have to read the CERT links on that page as