www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe, Jr." <wr...@lnd.com>
Subject RE: mod_include/6279: echo var shows &lt; when the variable contains a tag
Date Thu, 06 Jul 2000 17:32:24 GMT
> <!--#set var="FOLLOWS_UP_BOARD"        value="<img 
> src=/imgs/wb_siguientes.gif border=0 width=20 height=20>" -->

Can you use %3C and %3E for the lt/gt pair?  See if that might
help... short of that I will start tearing down the code (I need
this myself rather soon :)

The problem is in the illicit redirection fix... not Apache
specific but an across the board security hole.  If this doesn't
work around the problem we will look for some provision for this
sort of need.

Bill


Mime
View raw message