[VCL-274] check for SQL injection / XSS

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.2
• Component/s: web gui (frontend)
• Assignee: Josh Thompson
• Reporter: Josh Thompson
• Created: 03/Dec/09 16:02
• Updated: 01/Sep/10 19:16
• Resolved: 01/Sep/10 19:16

Description

As pointed out by Leo Simons in the VOTE thread for releasing VCL 2.1, there may be some SQL Injection / XSS vulnerabilites in VCL. See point #4 in his message for further information:

http://mail-archives.apache.org/mod_mbox/incubator-general/200911.mbox/%3C30b2aef60911240214y7b763a1fs749e16b97393a506%40mail.gmail.com%3E