diff options
| author | Joey Hess <joey@kitenet.net> | 2011-03-28 13:09:14 -0400 |
|---|---|---|
| committer | Joey Hess <joey@kitenet.net> | 2011-03-28 13:09:14 -0400 |
| commit | 116672d7d72d8181607f69ad22ad8bd0bb9d8348 (patch) | |
| tree | ac4a1ab122b063b2f10ff935dcbf792a4be42c3d | |
| parent | e548b0c24575a91ba4678e9cf1b78e02ff15d887 (diff) | |
| parent | 144540f546892d6fd949cdbb8fe990c6f4781085 (diff) | |
Merge branch 'master' of ssh://git.ikiwiki.info/srv/git/ikiwiki.info
| -rw-r--r-- | doc/security.mdwn | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/doc/security.mdwn b/doc/security.mdwn index fb211cd12..916bd0484 100644 --- a/doc/security.mdwn +++ b/doc/security.mdwn @@ -466,7 +466,7 @@ with the comments plugin enabled. ([[!cve CVE-2011-0428]]) ## possible javascript insertion via insufficient htmlscrubbing of alternate stylesheets -Tango noticed that 'meta stylesheet` directives allowed anyone +Giuseppe Bilotta noticed that 'meta stylesheet` directives allowed anyone who could upload a malicious stylesheet to a site to add it to a page as an alternate stylesheet, or replacing the default stylesheet. |