[wp-trac] [WordPress Trac] #16089: Cross-site Scripting Vulnerability in /wp-admin/setup-config

[WordPress Trac]

#16089: Cross-site Scripting Vulnerability in /wp-admin/setup-config
----------------------------+------------------
 Reporter:  danielmiessler  |       Owner:
     Type:  defect (bug)    |      Status:  new
 Priority:  normal          |   Milestone:  3.1
Component:  General         |     Version:  3.1
 Severity:  critical        |  Resolution:
 Keywords:  has-patch       |
----------------------------+------------------

Comment (by ryan):

 We're protecting against someone purposefully injecting XSS into their
 config during setup?  Why bother?

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/16089#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software