Denis Flaven 25d29da058 Prevent Javascript errors in case a name contains a quote. ...

SVN:trunk[1669]

2011-11-15 13:09:38 +00:00

..

php-ofc-library

Exclude a (risky) and unused file for the build

2011-09-13 14:38:52 +00:00

ajax.csvimport.php

Fixed Trac#446: XSS vulnerabilities... to be tested !

2011-08-11 10:17:03 +00:00

ajax.render.php

Typo ! Impact: Unknown ?

2011-09-22 11:08:34 +00:00

audit.php

Better error handling in case of OQL error

2011-11-09 17:01:12 +00:00

csvimport.php

Fixed regression due to the enhanced security (ignore a field in CSV import)

2011-08-22 08:49:52 +00:00

graphviz.php

#446 continuing: sanitizing parameters...

2011-08-15 13:55:59 +00:00

index.php

Redirect from /pages/index.php to /index.php (to prevent users from listing the directory)

2010-09-13 12:36:58 +00:00

logoff.php

Implemented two new options for CAS:

2011-07-26 09:43:21 +00:00

navigator.php

Use absolute URLs as much as possible to be independent from the page being executed...

2011-07-26 13:22:45 +00:00

opensearch.xml.php

Use absolute URLs as much as possible to be independent from the page being executed...

2011-07-26 13:22:45 +00:00

preferences.php

Added the ability to specify programmatically the scope for "favorite organizations". Note the the end-user can still restrict this list even further using the "Preferences" page.

2011-09-01 14:06:51 +00:00

run_query.php

Fixed Trac#446: XSS vulnerabilities... to be tested !

2011-08-11 10:17:03 +00:00

schema.php

#446 continuing: sanitizing parameters...

2011-08-15 13:55:59 +00:00

UI.php

Prevent Javascript errors in case a name contains a quote.

2011-11-15 13:09:38 +00:00

UniversalSearch.php

#446 continuing: sanitizing parameters...

2011-08-15 13:55:59 +00:00

xml.navigator.php

More fixes for Trac#446: XSS vulnerabilities with vectors containing double quotes

2011-09-08 13:21:32 +00:00