Conversation:

Notices

1. MMN-o ✅⃠ (mmn)'s status on Saturday, 25-Oct-2014 09:25:08 EDT MMN-o ✅⃠

   Remote profile options...
   This is a !snbug announcement. A lame coding error left the opportunity for an #XSS attack in the #Bookmark plugin in !sn source which only very recently got fixed. I recommend updating to !gnusocial v1.1.2-alpha1 (i.e. latest git commit) if you haven't disabled the Bookmark !gnusocial I believe the severity is not very great, since only a href="" value could be writ…
   • Erkan Yılmaz (erkan)'s status on Wednesday, 29-Oct-2014 01:45:47 EDT Erkan Yılmaz

     Remote profile options...

     • MMN-o ✅⃠
     cc !gs (opportunity for #XSS attack also in !sn !statusnet )