Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Murray Roke 467 posts 875 karma points c-trib
    Sep 25, 2013 @ 23:49
    Murray Roke
    0

    Security Bug

    Hi I've noticed a small security flaw in this projectin that requests to gravatar are over http not https.

    To fix this edit UCommentModeration.ascx line 103 change:

    <img src='http://www.gravatar.com/avatar/...
    

    to

    <img src='//www.gravatar.com/avatar/...
    
  • This forum is in read-only mode while we transition to the new forum.

    You can continue this topic on the new forum by tapping the "Continue discussion" link below.

Please Sign in or register to post replies