[rt-devel] Re: RT 2.1.56 (wrong charset)

Stanislav Sinyagin ssinyagin at yahoo.com
Fri Jan 24 17:39:04 EST 2003


--- Jesse Vincent <jesse at bestpractical.com> wrote:
> DO NOT do thst on a production system. It will open you up 
> to a wide variety of cross-site scripting attacks. Anyone who sends mail
> to RT will be able to compromise the account of any RT user who even has
> a ticket listed in their homepage.

wow. no, I won't run it on production system. I've got a FreeBSD hard disk 
in my desk, need only to find the chassis to plug it into... 





More information about the Rt-devel mailing list