[symfony-users] Re: JS injection in www.askeet.com

2007-06-13 Thread Sid Bachtiar
What was the cause? will there be a patch for Symfony version 1.0? On 6/14/07, Fabien POTENCIER [EMAIL PROTECTED] wrote: fixed Thanks Muhammad Asif Ali wrote: Hi, anyone checked the askeet site in the last couple of days. i am getting 2 javascript alerts . one

[symfony-users] Re: JS injection in www.askeet.com

2007-06-13 Thread Fabien POTENCIER
This is not a symfony problem. This is just because askeet was done a long time ago and output escaping was not enabled. Fabien Sid Bachtiar wrote: What was the cause? will there be a patch for Symfony version 1.0? On 6/14/07, Fabien POTENCIER [EMAIL PROTECTED] wrote: fixed Thanks

[symfony-users] Re: JS injection in www.askeet.com

2007-06-13 Thread Mohammad Asif Ali
Hi fabien actualluy i have used the askeet in my current project and cutomized it to as per my requirment. is there any loop holes which i need to be fixed in my askeet. Thanx. On Jun 14, 9:37 am, Fabien POTENCIER [EMAIL PROTECTED] project.com wrote: This is not a symfony problem. This

[symfony-users] Re: JS injection in www.askeet.com

2007-06-13 Thread Fabien POTENCIER
The best is to enable output escaping or use esc_entities() in your code to escape question titles (see http://trac.askeet.com/trac/changeset/93). Fabien Mohammad Asif Ali wrote: Hi fabien actualluy i have used the askeet in my current project and cutomized it to as per my