threads / bug / 389

About gitweb.cgi bug

Subject: About gitweb.cgi bug

## tl;dr

2 messages between Apr 29, 2005 and Apr 29, 2005.

replies: 1people: 2as markdown or json

Tomasz bla Fortuna· Apr 29, 2005, 13:23 UTC · lore

  Hi,
I've found html injection bug:
http://www.kernel.org/git/gitweb.cgi?p=%3Cimg%20src=%22http://af.gliwice.pl/p.png%22%3Ecogito%2Fcogito.git;a=log
May lead to redirection to some pr0n sites using kernel.org address...
but its nothing.

Have a nice day,
  Tomasz bla Fortuna

Kay Sievers· Apr 29, 2005, 15:53 UTC · re: Tomasz bla Fortuna · lore

Re: About gitweb.cgi bug

On Fri, 2005-04-29 at 15:23 +0200, Tomasz bla Fortuna wrote:

Show 5 quoted lines

>   Hi,
> I've found html injection bug:
> http://www.kernel.org/git/gitweb.cgi?p=%3Cimg%20src=%22http://af.gliwice.pl/p.png%22%3Ecogito%2Fcogito.git;a=log
> May lead to redirection to some pr0n sites using kernel.org address...
> but its nothing.

I've sent a fix for this to the kernel.org master.

Thanks, Kay