Denis Flaven c4db9cd84e More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes ...

SVN:trunk[1563]

2011-09-08 13:21:32 +00:00

..

templates

- Revised styles for a nicer/cleaner display of the details and forms.

2011-04-07 07:44:09 +00:00

ajaxwebpage.class.inc.php

- Allow creation of an ticket in a different initial state via the new 'initial_state_path' attribute.

2011-08-25 16:04:58 +00:00

application.inc.php

Templates: new type of block = sqlblock, allows for displaying tables/charts based in SQL queries (much quicker for Group By operations)

2011-06-21 13:12:02 +00:00

applicationcontext.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

applicationextension.inc.php

Plugin API: added OnIsModified()

2011-04-26 16:03:01 +00:00

audit.category.class.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00

audit.rule.class.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00

clipage.class.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00

cmdbabstract.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

csvpage.class.inc.php

Cleanup: replaced remaining occurences of ISO-8859-1

2010-11-23 16:18:48 +00:00

displayblock.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

iotask.class.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00

itopwebpage.class.inc.php

#446 XSS vector through the page title

2011-09-08 10:30:18 +00:00

itopwizardwebpage.class.inc.php

#446 XSS vector through the page title

2011-09-08 10:30:18 +00:00

loginwebpage.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

menunode.class.inc.php

Added the ability to specify programmatically the scope for "favorite organizations". Note the the end-user can still restrict this list even further using the "Preferences" page.

2011-09-01 14:06:51 +00:00

nicewebpage.class.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00

portalwebpage.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

sqlblock.class.inc.php

SQLBlock - removed Warnings in case of empty data set

2011-08-08 16:02:28 +00:00

startup.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00

template.class.inc.php

Fix: properly manage validation field for vertical radio buttons.

2011-09-06 10:25:06 +00:00

transaction.class.inc.php

Internal: the transaction mechanism was inoperant when a form was built within the target page.

2011-08-18 15:00:39 +00:00

ui.extkeywidget.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

ui.htmleditorwidget.class.inc.php

Implementation of bulk modify and bulk apply stimulus... to be tested !

2011-03-23 16:22:35 +00:00

ui.linkswidget.class.inc.php

- Allow creation of an ticket in a different initial state via the new 'initial_state_path' attribute.

2011-08-25 16:04:58 +00:00

ui.passwordwidget.class.inc.php

Fixed Trac#446: XSS vulnerabilities... to be tested !

2011-08-11 10:17:03 +00:00

uilinkswizard.class.inc.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00

uiwizard.class.inc.php

Fixed Trac#446: XSS vulnerabilities... to be tested !

2011-08-11 10:17:03 +00:00

user.preferences.class.inc.php

Deletion: entirely reviewed to take into account the objects being synchronized by an external data source, or the plugins constraints.

2011-04-08 11:29:25 +00:00

utils.inc.php

Fixed regression due to the enhanced security (param file)

2011-08-22 08:32:25 +00:00

webpage.class.inc.php

#446 XSS vector through the page title

2011-09-08 10:30:18 +00:00

wizardhelper.class.inc.php

Allow updating/recomputing of read-only attributes on the fly in the edit form.

2011-08-16 15:58:09 +00:00

xmlpage.class.inc.php

REVIEWED THE FILE INCLUSION POLICY

2010-11-22 17:53:52 +00:00