Kwa Site script -> XSS
Nou ta renmen remèsye Jozye Hansen ak Caveza Scott pou ede yo nan idantifye ak ede nou debogaj de XSS vulnerable ki te potansyèl nan itilizatè efè sèvi ak eksploratè navigatè entènèt ak vèsyon pi ba pase 8, oswa lè xss pwoteksyon te ouvètman koupe. Nou evite ankouraje a rele sa vèsyon 0.6.6.6 ak reprandr regilye nonmen politik yo. Moun vulnerable pa poze nenpòt ki risk vebmèstr oswa hosters itilize Transposh, men itilizatè yo ki ta ka mete konfyans Scripts soti nan sit sa yo lè l sèvi avèk lan sournwa XSS metòd.
Sa a lage tou de chanjman pakèt lòt ki te deja komèt ak ta gen pwobableman tann pou yon lage pita otreman, premye a te yon ti amelyorasyon analizeur a, sipò pou pèmèt kèk plis html “brekè antite” comme ’ ki te kreye pa lojisyèl eseye Outsmart itilizatè a, nou ta renmen remèsye archon810 sou ede l 'nan sa a ensèk rapò.
Denye, men se pa omwen se yon chanjman nan sipò an pou dèlko Google XML Sitemap, patch la gen yon lèt yo retire yo nan lòd gen bon sipò pou php5.3, ak sou lòt bon nouvèl, vèsyon an ap vini 4 sa-a Plugin gen sipò deja bati nan, sa a vèsyon ede tou nan kraze limit ki url 50k ke kèk itilizatè yo te. Se konsa, nou ta di mèsi Arne Brachhold sou gwo travay li sou pwojè sa a.
Se konsa, tout moun, ale epi ajou! jis paske jwenn yon imaj matche ak pòs sa yo te tankou yon anfòm difisil.
#1 par Anphicle sur Novanm 12, 2010 - 2:05 sou
Great, kenbe travay la bon!
#2 par Peter sur Novanm 12, 2010 - 10:04 sou
Guten Tag
Was bedeutet der Hinweis:
“Google Sitemaps XML Generator, der Patch ”
Ich habe : Sitemap Version 3.2.4 und Transposh Version 0.6.6
Aber es werden in der xml keine Sprachenseiten erzeugt.
Bonjou
Peter
#3 par ofer sur Novanm 12, 2010 - 10:33 sou
Alo,
Make sure you have the latest patch, egzanp. remove the & from the previous patch, I have updated the changelog, and now the FAQ with this new patch, if you still have problems I’ll send you the patched file.
Good luck
#4 par Timo Ligi sur Novanm 12, 2010 - 8:59 pm
Tere päevast
Kui ma panen tööle “Google Sitemaps XML Generator” ja Transposh version 0.6.6 siis saan Google sitemaps XML-is vastuseks “Analysis ksml Erè: no element found, Liy Nimewo 1, Kolòn 1:” Samas kui võtan maha Transposh version 0.6.6, siis Google sitemaps töötab.
Timo
#5 par ofer sur Novanm 12, 2010 - 11:53 pm
An updated patch can be found here: http://trac.transposh.org/wiki/PluginSupportMatrix
#6 par Elmar sur Novanm 12, 2010 - 10:24 pm
Same problem as in earlier versions since 0.6.3: After upgrade I see “Okt_Oktober_abbreviation” olye pou yo “Oktòb” in my blog. Same with any short form of month when German name is different from English name. Se 0.66 deleted again and version 0.61 ankò – it works. And proofes the plugin makes something wrong. And I don’t want to use a plugin that I have to work with by myself editing PHP… So any upgrade in the future will not fix it?
#7 par ofer sur Novanm 12, 2010 - 10:38 pm
Premye, please create a ticket in the trac (trac.transposh.org)
Dezyèm, please try to provide more details regarding your system (which WP you use, elatriye)
Twazyèm, you can disable the gettext integration, should probably solve your issue better than downgrading to 0.6.1
And good luck…
#8 par Elmar sur Novanm 13, 2010 - 12:04 sou
I did create a ticket…
#9 par Elmar sur Novanm 13, 2010 - 12:37 sou
Quick and successful help – I don’t need to edit PHP, only to change one option in the options. Great! Now it works perfect again! Mèsi poutèt ou tèlman!
#10 par nvr sur Novanm 13, 2010 - 12:26 sou
it is possible to permanent disable e-mail adresses from translation? (both strings and urls)
I mean the built-in function, not every time the use of no_translate class.
#11 par ofer sur Novanm 13, 2010 - 12:55 sou
As far as I know, at least urls (ones that are properly marked as ones) will not be translated, checking for every word in every phrase if it might be a url or email might create some substantial overhead.
#12 par Ivo Minchev sur Desanm 17, 2010 - 8:05 pm
I have a Backup problem. I get the following “500 – Couldn’t resolve host ‘svc.transposh.org’” when I click the “Do Backup Now” bouton.
#13 par ofer sur Desanm 17, 2010 - 11:48 pm
Mèsi pou rapòte,
I guess that would be yet another problem with cloudflare dns, I will fix this in the coming day.