Re: [users@httpd] XSS Issue in v2.0.59

2017-05-02 Thread Adam R. Vest
Hey, I don't have any input on how to address those vulnerabilities, but I think the energy you're going to expend trying to patch those would be put to better use trying to fix whatever's incompatible with newer versions of apache so you can upgrade. Just my two cents. Good luck either way.

Re: [users@httpd] XSS Issue in v2.0.59

2017-05-02 Thread Marat Khalili
XSS is a vulnerability of the application running on top of web-server and browser, there's hardly a way to fix it on a web-server level. But outdated web-server may have vulnerabilities of its own. Of the ways you listed #1 without #2 usually doesn't work; OTOH #2 done comprehensively (with

[users@httpd] XSS Issue in v2.0.59

2017-05-01 Thread Hagan, Mark
Hello All, Looking for some help to determine if I can configure Apache 2.0.59 to address a couple Cross Site Scripting (XSS) vulnerabilities. I'm not able to upgrade to a later version, so I'm trying to understand if there is functionality within this version to address the XSS issue. I