Changes to Injector Scrubber

   4

Changes to Injector Scrubber

Hey all,

I've gone through an analyzed the 391 different injector attacks we're had in the last three weeks as well as all of the false positive notifications. I decided to make a change to the Code Scrubber: it will now no longer check data put into forms of people that are logged into the website.

This should correct about 95% of the false positive errors out there. If you werehaving trouble with submitting some stuff, just make sure you are logged in.

Based on my analyzsis of the types of attacks we've had, this shouldn't open any old vulnerabilities. If it does somehow, I'll revert.

Jac

Sweet, Jac. No more having to look over clan mate's ACC posts for the word Alter!

Jac pwnz.

Jac pwnz, and Anubis you haven't been promoted yet? Well Jac RULES the WORLD. :D

Jac is awesome!

Anubis? Wha?!

You need to be logged in to post comments