There is some discussion of RSS feed vulnerabilities here:
http://news.com.com/2100-1002_3-6102171.html
I don't know enough to comment, but thought some here might be interested.
Interesting news about RSS Feeds
-
garvinhicking
- Core Developer
- Posts: 30022
- Joined: Tue Sep 16, 2003 9:45 pm
- Location: Cologne, Germany
- Contact:
Re: Interesting news about RSS Feeds
Hi!
Thanks for posting this. Serendipity does all we can to escape comment input, so this should not be a problem. But of course the owner of a blog is responsible for the good or bad code he puts into his articles.
However any decent RSS reader should definitely deactivate JS in RSS feeds.
Best regards,
Garvin
Thanks for posting this. Serendipity does all we can to escape comment input, so this should not be a problem. But of course the owner of a blog is responsible for the good or bad code he puts into his articles.
However any decent RSS reader should definitely deactivate JS in RSS feeds.
Best regards,
Garvin
# Garvin Hicking (s9y Developer)
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/
# Did I help you? Consider making me happy: http://wishes.garv.in/
# or use my PayPal account "paypal {at} supergarv (dot) de"
# My "other" hobby: http://flickr.garv.in/