Re: [google-appengine] Possible cursor exploit? (was Re: 1.3.1 SDK Prerelease - help us verify)

2010-02-18 Thread Nick Johnson (Google)
Hi James, Good questions. Answers inline. On Thu, Feb 18, 2010 at 2:08 AM, James Ashley james.ash...@gmail.comwrote: I don't have time to test this just now, and I hate to waste bandwidth on what (so far) is just idle speculation, but I did spot what looks like a potential security. I

[google-appengine] Possible cursor exploit? (was Re: 1.3.1 SDK Prerelease - help us verify)

2010-02-17 Thread James Ashley
I don't have time to test this just now, and I hate to waste bandwidth on what (so far) is just idle speculation, but I did spot what looks like a potential security. I figured it'd be better to share it with the group than sit on it until I actually *do* have time to confirm/ deny. On Feb 16,