Full Disclosure mailing list archives

Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities


From: Jacqui Caren-home <jacqui.caren () ntlworld com>
Date: Wed, 29 Jun 2011 09:13:43 +0100

On 29/06/2011 02:40, Nick FitzGerald wrote:
Christian Sciberras wrote:

Rather than that, I'd say the dev team is out of sync with the security
team..

Assuming that that may be a reasonable one-sentence encapsulation of
how Joomla development is organized...

The fact such a sentence can be meaningfully utterred tells us there
are major problems _inherent_ in Joomla.

What I find worrying is that I cannot see the test suite anywhere.
Have I misse dthe link, is it secret or non existent?

Jacqui

http://forum.joomla.org/viewtopic.php?f=681&t=624023&sid=e07f7a089ae6ca49291960fb1744de51

I would have thought they would be asking for help to migrate test into one of the free-to-use
CI systems available to floss projects.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: