add comment

svn path=/trunk/mcs/; revision=116836

diff --git a/mcs/class/System.Web/System.Web/HttpRequest.cs b/mcs/class/System.Web/System.Web/HttpRequest.cs
index 97f55e61b5cd1981e309edb5d1b9b81013a70b93..f35fe920b298c3ab04ea70e7632481a235888a73 100644 (file)
--- a/mcs/class/System.Web/System.Web/HttpRequest.cs
+++ b/mcs/class/System.Web/System.Web/HttpRequest.cs
@@ -1452,6 +1452,7 @@ namespace System.Web {
                        char current = val [0];
                        for (int idx = 1; idx < len; idx++) {
                                char next = val [idx];
+                               // See http://secunia.com/advisories/14325
                                if (current == '<' || current == '\xff1c') {
                                        if (next == '!' || next < ' '
                                            || (next >= 'a' && next <= 'z')