Potential security issue: Yahoo authorisation requests with invalid encoding

Mark Doliner mark at kingant.net
Tue Jul 16 13:43:14 EDT 2013

On Mon, Jul 15, 2013 at 2:34 PM, Robert Vehse <robertvehse at fastmail.fm> wrote:
> Did anything become of this?

Unfortunately no, not yet :-(

I still want to fix it, obviously, but I've been negligent. If anyone
else has time, feel free. I'm also worried the fix might be buggy and
cause various random functionality to break.

More information about the security mailing list