-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 10 Feb 2008 18:52:20 -0500 Source: ikiwiki Binary: ikiwiki Architecture: source all Version: 2.32.3 Distribution: unstable Urgency: high Maintainer: Joey Hess <joeyh@debian.org> Changed-By: Joey Hess <joeyh@debian.org> Description: ikiwiki - a wiki compiler Changes: ikiwiki (2.32.3) unstable; urgency=high . [ Josh Triplett ] * Do not allow the about: URI scheme; some browsers interpret about: URIs like a limited version of data: URIs. In particular, some versions of Internet Explorer interpret arbitrary HTML content in about: URIs. * Also filter the attributes cite, longdesc, and usemap, which can contain URIs. . [ Joey Hess ] * meta: Check that the urls provided for authorurl, permalink, and openid are safe and can't contain javascript. . [ Josh Triplett ] * Match literal '.' in URI schemas containing '.', rather than matching any character. * Do not allow the steam: URI scheme. * Allow the snews: URI scheme. * Allow the smb: URI scheme. Files: 7c1b0df6939ef05f3ed629a9514969e0 869 web optional ikiwiki_2.32.3.dsc 455c27111fd530584a2697b8caefe05b 638515 web optional ikiwiki_2.32.3.tar.gz a3097ae318b0d7adba0c0a3f2cd01bbd 757408 web optional ikiwiki_2.32.3_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHr4972tp5zXiKP0wRApu/AJ9qK7bDyuinL85HPQhBv4Pf7eM/4wCgmZj9 MwpVajWtKrfQehwmY4gKjIU= =d0VG -----END PGP SIGNATURE----- Accepted: ikiwiki_2.32.3.dsc to pool/main/i/ikiwiki/ikiwiki_2.32.3.dsc ikiwiki_2.32.3.tar.gz to pool/main/i/ikiwiki/ikiwiki_2.32.3.tar.gz ikiwiki_2.32.3_all.deb to pool/main/i/ikiwiki/ikiwiki_2.32.3_all.deb