Hire a senior Perl / Python programmer today; download my up-to-date resume (PDF)
John Bokma MexIT
freelance Perl programmer

Comments: Linux.com allows JavaScript via comments

0 comments

Today, "thanks" to a comment spam I received, I discovered that one can just post comments on linux.com containing JavaScript. The programmer who allowed for such a security hole should be very, very ashamed. At first I couldn't believe my eyes, but a very simple test showed me that it was indeed the case: at the time of writing anybody can post JavaScript on Linux.com via their comment system. Of course I contacted linux.com via email as soon as I discovered this issue.

Read the rest of Linux.com allows JavaScript via comments.

Post a comment

Note that your comment doesn't show up immediately. I review each comment before I add it to this site.

Check the Follow this page option if you want to receive an email each time a comment is posted to this page, including yours. A link to turn this option off will be included with each email.

Internet adresses will be converted automatically. You can use the following notation to specify anchor text for a link: [url=http://example.com/]example text[/url].