[Users] Spam on Trac

[Matt Kinsey]

Just an FYI,

That appears to be an XSS attempt, not just normal spam.

-Matt

On Tue, Jun 19, 2018 at 2:49 PM, Zach Etienne <zachetie at gmail.com> wrote:

> Hi all,
>
> Important: Now that trac is back online, it seems that someone is trying
> to spam it (see below). What should be done about this?
>
> -Zach
>
> *     *     *
> Zachariah Etienne
> Assistant Professor of Mathematics
> West Virginia University
> http://math.wvu.edu/~zetienne/
>
> ---------- Forwarded message ----------
> From: Einstein Toolkit <trac-noreply at einsteintoolkit.org>
> Date: Tue, Jun 19, 2018 at 2:01 PM
> Subject: Re: [ET Trac] [Einstein Toolkit] #2159: "/><img src=x
> onerror=confirm(1)>
> To:
> Cc: trac at einsteintoolkit.org
>
>
> #2159: "/><img src=x onerror=confirm(1)>
> -------------------------------------------------+----------
> ---------------
>   Reporter:  anonymous"/><img src=x              |      Owner:  (none)
>   onerror=confirm(1)>                            |
>       Type:  defect                              |     Status:  new
>   Priority:  unset                               |  Milestone:
>  Component:  Other                               |    Version:  development
>                                                  |  version
> Resolution:                                      |   Keywords:
> -------------------------------------------------+----------
> ---------------
> Changes (by anonymous):
>
>  * Attachment "evilsvgfile.svg" added.
>
>  "/><img src=x onerror=confirm(1)>
>
> --
> Ticket URL: <https://trac.einsteintoolkit.org/ticket/2159>
> Einstein Toolkit <http://einsteintoolkit.org>
> The Einstein Toolkit
>
> _______________________________________________
> Trac mailing list
> Trac at einsteintoolkit.org
> http://lists.einsteintoolkit.org/mailman/listinfo/trac
>
>
>
> _______________________________________________
> Users mailing list
> Users at einsteintoolkit.org
> http://lists.einsteintoolkit.org/mailman/listinfo/users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.einsteintoolkit.org/pipermail/users/attachments/20180619/62e9f546/attachment.html