Re: Moritz Naumann 2009-11-17 <20091117062325.25266.20914.report...@debby> > The GPG key signing coordination utility does not seem to attamept to > validate user inputs. As a result, it is possible to create a new signing > offer or requestaccount and fill in some HTML or script code which may
Hi Moritz, thanks for the report. We are currently rewriting the nm.debian.org website, but that will include dropping the gpg-coord pages as they have no maintainer. Don't put too much effort in these. But of course, possible SQL injections mean we should take down the pages sooner than later. Christoph -- c...@df7cb.de | http://www.df7cb.de/
signature.asc
Description: Digital signature
