Reza
Not a member
Reza's latest activity
Monday, November 17 2008
27
Possible [minor] injection risk
was created
in Restful Authentication
-
Reza created the ticket at 1:09 AMDefault generator adds a flash[:error] with unescaped params[:login] to session controller. One can simply inject arbitrary javascript code into login box.