[Tokyodebian-commits] Tokyo area Debian meeting resources.: Changes to 'master'

[Junichi Uekawa]

 utils/gae/EditEvent.html                        |   28 ++++++++++++------------
 utils/gae/EnqueteAdminEdit.html                 |   22 +++++++++---------
 utils/gae/EnqueteRespond.html                   |   24 ++++++++++----------
 utils/gae/Thanks.html                           |    2 -
 utils/gae/TopPage.html                          |   18 +++++++--------
 utils/gae/UserEventRegistrationPage.html        |   24 ++++++++++----------
 utils/gae/UserEventRegistrationPage_Simple.html |   12 +++++-----
 utils/gae/ViewEventSummary.html                 |    8 +++---
 utils/gae/admin_event.py                        |   10 ++++----
 utils/gae/debianmeeting.py                      |    4 +--
 utils/gae/enquete.py                            |   17 +++++++-------
 utils/gae/exploit/README                        |    2 +
 utils/gae/exploit/XHR.png                       |binary
 utils/gae/exploit/autoreserve.html              |   21 ++++++++++++++++++
 utils/gae/exploit/xmlhttprequest.js             |    9 +++++++
 utils/gae/testSystem.py                         |   10 ++++----
 utils/gae/user_registration.py                  |   19 +++++++++++++---
 utils/gae/webapp_generic.py                     |   11 ---------
 18 files changed, 138 insertions(+), 103 deletions(-)

New commits:
commit 1bf92bea35dcf6de56738bf424dca1c99cea4bf8
Author: Junichi Uekawa <dancer at netfort.gr.jp>
Date:   Thu Dec 15 08:13:18 2011 +0900

    harden the iframe URL.

commit 1918cc53f03e0ec3818d78d531b576dd059ace40
Author: Junichi Uekawa <dancer at netfort.gr.jp>
Date:   Thu Dec 15 08:06:34 2011 +0900

    add a readme file to note down what this file is about.

commit 9ab66d354e60f04f1e9d7142acd2d2a93222e2ee
Author: Junichi Uekawa <dancer at netfort.gr.jp>
Date:   Thu Dec 15 08:05:36 2011 +0900

    disallow injection of SCRIPT tags and risky strings by escaping the HTML.

commit 887fad631ee3f982656e65e884199832d55db55e
Author: Junichi Uekawa <dancer at netfort.gr.jp>
Date:   Thu Dec 15 06:54:02 2011 +0900

    Make the cross-site request exploit no longer work easily.
    You can still make XHR.