Eduforge: Feed to JavaScript (Feed2JS) NewsEduforge Project News HighlightsMore Small Security Fixes- November 13, 2007 A kind white hat programmer let us know of an issue with the snoopy.class.inc library (part of MagpieRSS) that could allow writing of files to the server.<br > <br > Once your Feed2JS code is working, we recommend as well these changes which remove display of your file system paths in PHP error notices:<br > (1) Remove the magpie_debug.php and magpie_simple.php files form your server.<br > (2) Edit the feed2js_config.php file and change:<br...http://eduforge.org/forum/forum.php?forum_id=1228 Minor Patch- November 12, 2007 Given notices from a few sources, a small modification has been added to the main Feed2JS site and the download versions (current release is 1.92), to trap and ignore any feed URLs submitted that contained malicious (or any) javascript. Not much development is going on here. Am planning to publish post to CogDogBlog with invitation for other developers to join, maybe take over, this project. I have no time!http://eduforge.org/forum/forum.php?forum_id=1227 |