Follow us on Twitter
Latest Tweet: Happy new year!!!
L'Alpiniste

The blog of the Project Fondue Team

Entries tagged “restructuredtext”

Security: Raw Roles in Docutils

written by Stuart Colville, on 27 July, 2010 at 21:48.

Whilst we were making our reStructuredText API site, we found a flaw in docutils 0.5 which made it possible to inject arbitrary html and javascript into any website or wiki which allows third parties to provide content via restructured text.

Read the full post: “Security: Raw Roles in Docutils”