[development] Drupal Main Theme page - A Suggestion for Improvements

Dries Buytaert dries at buytaert.net
Tue Dec 20 22:04:53 UTC 2005


On 20 Dec 2005, at 22:42, Moshe Weitzman wrote:
> <moshe checks contrib ...>
>
> Contextlinks: http://drupal.org/project/contextlinks
> Whatsrelated: http://drupal.org/node/24307

- Contextlinks:
    + Works on node pages only?
    + Confuses the heck out of me.
    + Does not seems to escape its input on output.  It looks  
vulnerable to XSS attacks, although I haven't tested it.

- Whatsrelated:
     + Can link to nodes only?
     + Does not seems to escape its input on output.  It looks  
vulnerable to XSS attacks, although I haven't tested it.
     + Does not work with HEAD.

--
Dries Buytaert  ::  http://www.buytaert.net/



More information about the development mailing list