Re: [Full-disclosure] Drupal Help Injection Module XSS Vulnerability

2010-02-27 Thread Mori Sugimoto
in the public issue queue. Please refer to http://drupal.org/node/475848 for more detail. Mori Sugimoto Drupal Security Team On 17/02/2010 16:29, Justin C. Klein Keane wrote: The full text of this advisory can also be found at http://www.madirish.net/?article=448 Description of Vulnerability

Re: [Full-disclosure] Drupal Help Injection Module XSS Vulnerability

2010-02-27 Thread Mori Sugimoto
Correction: Drupal Security Team _only_ deals with vulnerability reports that are related to major releases or release candidates. Mori Sugimoto Drupal Security Team On 27/02/2010 23:49, Mori Sugimoto wrote: This module is still in alpha and not considered suitable for any production