Published on 2007-06-26 23:56:00

Just few days before the official release of the famous iPhone, Safari 3.0.2 Beta released and seems to fix major rendering problems for windows platform but especially fixes a security bug which concerns XMLHttpRequest. Releasing Safari for windows was probably the best solution for Apple to get more feedback from the community and fix major problems before it will be too late. From the Apple Security Update :

CVE-ID: CVE-2007-2401

Available for: Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac OS X v10.4.9 or later, Mac OS X Server v10.4.9 or later

Impact: Visiting a malicious website may allow cross-site requests

Description: An HTTP injection issue exists in XMLHttpRequest when serializing headers into an HTTP request. By enticing a user to visit a maliciously crafted web page, an attacker could conduct cross-site scripting attacks. This update addresses the issue by performing additional validation of header parameters. Credit to Richard Moore of Westpoint Ltd. for reporting this issue.

• THE SCOTT ADAMS COLLECTION : AJAX Adventure Game
• New Dojo Offline Released
• YShout, A PHP and AJAX powered shoutbox
• iRows.com Delivers Online Web Spreadsheets for Salesforce.com's AppExchange

• Find the Best Brands at Best Buy
• [Contact us]

Member of the PHP Magazine Network, Copyright (C) 2005-2008 phpmagazine.net All Rights Reserved