--- listinfo.py 2010-01-28 13:55:59.328125000 -0800 +++ listinfox.py 2010-04-16 08:01:45.953125000 -0700 @@ -52,6 +52,15 @@ listinfo_overview(_('No such list %(safelistname)s')) syslog('error', 'No such list "%s": %s', listname, e) return + hostname = Utils.get_domain() + if mm_cfg.VIRTUAL_HOST_OVERVIEW and \ + mlist.web_page_url.find('/%s/' % hostname) == -1: + # List is for different identity of this host - say not found. + # Avoid cross-site scripting attacks + safelistname = Utils.websafe(listname) + listinfo_overview(_('No such list %(safelistname)s')) + syslog('error', 'No such list "%s@%s"', listname, hostname) + return # See if the user want to see this page in other language cgidata = cgi.FieldStorage()