Not terribly big news, but I've added a "random" link to the navigation bar under the strip on my webcomic Doomed to Obscurity. Click link, random past strip comes up, just like you'd expect. It's about time I caught up with the zillion other webcomics out there and added this.
I should add, a White Knight reader pointed out that there was a problem with my failing to check the input to the "$strip=" parameter in the URL, so some smart-ass could have typed "index.php?strip=0000001.jpg ' <and a bunch of code tags here>" and given it to someone else as a link to click. That is what we call a "code injection vulnerability" and it's a naughty, naughty thing for a variable to do. I did check trying to get Javascript to execute that way and always got a 403-forbidden, so my system is apparently too smart for that (or God knows, I coded something else back there and forgot about it), but I closed that loophole now by rigorously checking the variable's contents before using it.
And then tossed in the random-link feature. See what it takes to get me to update something around here?
blog comments powered by Disqus
