Neven wrote:xfz wrote:How about the security issues in YAF 1.0.1?
We were trying to install it on our server but it dit complain about security breaches with the cross scripting (users can access the other users cookies).
Are there any problems or could we trust it?
Can you tell us how did you access other users' cookies?
Was the cookie usefull? I was enable to abuse even my own cookie at localhost....
I haven't.
I search on the internet for security problems and found out that you can do this.