--- listinfo.py 2010-01-28 13:55:59.328125000 -0800
+++ listinfox.py 2010-04-16 08:01:45.953125000 -0700
@@ -52,6 +52,15 @@
listinfo_overview(_('No such list %(safelistname)s'))
syslog('error', 'No such list "%s": %s', listname, e)
return
+ hostname = Utils.get_domain()
+ if mm_cfg.VIRTUAL_HOST_OVERVIEW and \
+ mlist.web_page_url.find('/%s/' % hostname) == -1:
+ # List is for different identity of this host - say not found.
+ # Avoid cross-site scripting attacks
+ safelistname = Utils.websafe(listname)
+ listinfo_overview(_('No such list %(safelistname)s'))
+ syslog('error', 'No such list "%s@%s"', listname, hostname)
+ return
# See if the user want to see this page in other language
cgidata = cgi.FieldStorage()