[VIM] vendor dispute: VCS

Steven M. Christey coley at linus.mitre.org
Tue Mar 14 19:41:22 EST 2006

While investigating this issue further, I found that the
Request_Name_Display parameter in the same affected script has an XSS
issue (probably reflected instead of stored).  I didn't look any further.



generates a pretty big-lookin cookie.

- Steve

More information about the VIM mailing list