RE: [WEB SECURITY] cross site trace

["Brian Shura" <bshura@xxxxxxxxxxxxx>]

James Landis said:

"Or you can just *patch and save time
debating the risk of the issue*."


But if the issue really is very low risk, couldn't implementing the security
patch be more risky than just leaving the issue alone?  Any time you make
changes to the web server you run the risk of introducing more bugs and
sometimes the "fix" could actually end up making things worse.

-Brian


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/archive/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn
http://www.linkedin.com/e/gis/83336/4B20E4374DBA