FYI: due to the difficulty in making the security issues logged in gemini public (the title or/and details would be very useful to potential hackers), I've decided that when we have a security related issue that ends up requiring a change in code, I will keep the original gemini issue private, but create a new issue that is public. This will have the title used in the security advisory and a link to the relevant page for further details. This should allow people to see all the issues worked on for a release, but still ensure that no sensitive information gets leaked.

Thanks,

Cathal

Anyone know what is happening with XSS resolution found by Soroush Dalili?

Thanks

Marc.

Alex Shirley wrote Not entirely sure here what this is Marc, but doing a search came up with this forums issue: http://www.dotnetnuke.com/Community/Blogs/tabid/825/EntryID/1395/Default.aspx Cathal may know more....

Hi, Sorry I should have given a link: http://www.securityfocus.com/archive/1/492793 

Has anyone looked at how much of an issue this actually is and does anybody know if anything is being done about it?

Thanks