Re: Site Security Policy

2008-07-11 Thread bsterne
On Jul 10, 8:47 am, [EMAIL PROTECTED] wrote: > The problem is that although solutions exist > to both of these problems, developers have not properly implemented > the solution.  With your approach of SSP and safe requests, you are > again relying on the developer to use the solution correctly, and

Re: Site Security Policy

2008-07-11 Thread bsterne
On Jun 25, 5:22 am, Gervase Markham <[EMAIL PROTECTED]> wrote: > The documentation for Request-Source is now more complete, but it's a > bit jumbled. I would make bullet 4 into bullet 2, and remove the second > sentence because it's repeated in (new) bullet 3. Good points. I'll make these changes