S-277: Roundup Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-277: Roundup Vulnerability
# 1  
Old 04-25-2008
S-277: Roundup Vulnerability

Roundup, an issue tracking system, fails to properly escape HTML input, allowing an attacker to inject client-side code (typically JavaScript) into a document that may be viewed int he victim's browser. The risk is LOW. May allow an attacker to inject client-side code (typically JavaScript) into a document that may be viewed in the victim's browser.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

3 More Discussions You Might Find Interesting

1. News, Links, Events and Announcements

Bash vulnerability

Not sure if there is a post about it here somewhere already. Anyway: Remote exploit vulnerability in bash CVE-2014-6271 | CSO Online (3 Replies)
Discussion started by: zaxxon
3 Replies

2. Shell Programming and Scripting

Sum of all lines in file without roundup with awk

Hi, I have a file and I want to sum all the numbers in it. Example of the file: 0.6714359 -3842.59553830551 I used your forum (https://www.unix.com/shell-programming-scripting/74293-how-get-sum-all-lines-file.html) and found a script, what worked for me: awk '{a+=$0}END{print a}'... (8 Replies)
Discussion started by: mario8eren
8 Replies

3. UNIX for Dummies Questions & Answers

Vulnerability Alerts

Aside from CERT, are there any additional sources for unix/linux vulnerabilities? (1 Reply)
Discussion started by: kmgrady01
1 Replies
Login or Register to Ask a Question
JavaScript::Minifier(3pm)				User Contributed Perl Documentation				 JavaScript::Minifier(3pm)

NAME
JavaScript::Minifier - Perl extension for minifying JavaScript code SYNOPSIS
To minify a JavaScript file and have the output written directly to another file use JavaScript::Minifier qw(minify); open(INFILE, 'myScript.js') or die; open(OUTFILE, '>myScript-min.js') or die; minify(input => *INFILE, outfile => *OUTFILE); close(INFILE); close(OUTFILE); To minify a JavaScript string literal. Note that by omitting the outfile parameter a the minified code is returned as a string. my minifiedJavaScript = minify(input => 'var x = 2;'); To include a copyright comment at the top of the minified code. minify(input => 'var x = 2;', copyright => 'BSD License'); To treat ';;;' as '//' so that debugging code can be removed. This is a common JavaScript convention for minification. minify(input => 'var x = 2;', stripDebug => 1); The "input" parameter is manditory. The "output", "copyright", and "stripDebug" parameters are optional and can be used in any combination. DESCRIPTION
This module removes unnecessary whitespace from JavaScript code. The primary requirement developing this module is to not break working code: if working JavaScript is in input then working JavaScript is output. It is ok if the input has missing semi-colons, snips like '++ +' or '12 .toString()', for example. Internet Explorer conditional comments are copied to the output but the code inside these comments will not be minified. The ECMAScript specifications allow for many different whitespace characters: space, horizontal tab, vertical tab, new line, carriage return, form feed, and paragraph separator. This module understands all of these as whitespace except for vertical tab and paragraph separator. These two types of whitespace are not minimized. For static JavaScript files, it is recommended that you minify during the build stage of web deployment. If you minify on-the-fly then it might be a good idea to cache the minified file. Minifying static files on-the-fly repeatedly is wasteful. EXPORT None by default. Exportable on demand: minifiy() SEE ALSO
This project is developed using an SVN repository. To check out the repository svn co http://dev.michaux.ca/svn/random/JavaScript-Minifier This module is inspired by Douglas Crockford's JSMin: http://www.crockford.com/javascript/jsmin.html You may also be interested in the CSS::Minifier module also available on CPAN. AUTHORS
Peter Michaux, <petermichaux@gmail.com> Eric Herrera, <herrera@10east.com> COPYRIGHT AND LICENSE
Copyright (C) 2007 by Peter Michaux This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.8.6 or, at your option, any later version of Perl 5 you may have available. perl v5.10.1 2010-12-19 JavaScript::Minifier(3pm)