RE: [WEB SECURITY] cross site trace

["Martin O'Neal" <martin.oneal@xxxxxxxxxxxx>]

> PCI auditors consider it a "PCI" issue...

This may be something you just have to roll with though.  There are a
couple of not-strictly-critical things that are flagged as instant fails
for a PCI audit, such as weak crypto ciphers. 

Martin....

----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives:
http://www.webappsec.org/lists/websecurity/archive/

Subscribe via RSS:
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn
http://www.linkedin.com/e/gis/83336/4B20E4374DBA