PEAR is archived and read-only

This mirror preserves historical PEAR package releases and metadata so existing references remain available.

No new packages can be added.
No package updates will be published here.
The PEAR CLI and channel metadata continue to work for packages and versions already in the archive.
New projects should use Composer and Packagist.

Home » HTML » HTML_Safe » Bug #9733

Security hole

Details

Request #9733	Security hole
Submitted	2007-01-04 12:48 UTC
From	okin7 at yahoo dot fr
Assigned	demrit
Status	Suspended
Package	HTML_Safe
PHP Version	Irrelevant
Roadmaps	(Not assigned)

Comments

[2007-01-04 12:48 UTC] okin7 at yahoo dot fr

Description:
------------
A new XSS security attack is being reported these days on the net, which affects the Adobe Acrobat Reader plugin.

See :
http://www.webappsec.org/lists/websecurity/archive/2007-01/msg00005.html
or
http://michaeldaw.org/md-hacks/backdooring-pdf-files/

It could a good idea to parse URLs in order to remove those dangerous strings ?