Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-02-07 | CI_Encryption: Optimizations and test cases | Andrey Andreev | 3 | -92/+324 | |
2014-02-06 | Merge changes from develop | Andrey Andreev | 3 | -3/+12 | |
2014-02-06 | Make CI_Session's HMAC comparison time-attack-safe | Andrey Andreev | 1 | -1/+9 | |
2014-02-06 | CI_Encryption: CAST-128/CAST5 and RC4/ARCFour compatibility | Andrey Andreev | 2 | -15/+73 | |
2014-02-06 | CI_Encryption: Time-attack-safe HMAC verification | Andrey Andreev | 1 | -4/+18 | |
2014-02-05 | Fix #2856 | Andrey Andreev | 2 | -2/+3 | |
2014-02-05 | CI_Encryption: HMAC to not be derived from the encryption key | Andrey Andreev | 2 | -62/+62 | |
2014-02-05 | More CI_Encryption improvements | Andrey Andreev | 2 | -49/+10 | |
- Make OpenSSL the default driver if available (because MCrypt is stupid). - Require MCRYPT_DEV_URANDOM for the MCrypt availability check (because security; also, incidentally - it's faster that way ;)). | |||||
2014-02-05 | CI_Encryption: More MCrypt/OpenSSL compatibility and get rid of the ↵ | Andrey Andreev | 2 | -30/+115 | |
MCRYPT_MODE_* constants | |||||
2014-02-05 | CI_Encryption: Add Blowfish to compatibility list | Andrey Andreev | 2 | -12/+14 | |
2014-02-05 | CI_Encryption: Work around MCrypt's dumb behavior in ECB mode | Andrey Andreev | 1 | -49/+65 | |
2014-02-05 | Merge branch 'develop' into feature/encryption | Andrey Andreev | 4 | -2/+22 | |
2014-02-05 | Integrate CI_Encryption into the framework | Andrey Andreev | 5 | -36/+61 | |
TODO: Add documentation in user_guide_src/source/libraries/encryption.rst | |||||
2014-02-04 | CI_Encryption: Remove ARCFour from aliased ciphers due ... | Andrey Andreev | 1 | -4/+2 | |
Seems like there are some issues with it | |||||
2014-02-04 | CI_Encryption: Fix more errors and add a 'portability' test case | Andrey Andreev | 2 | -18/+67 | |
2014-02-04 | Fix a logical error in CI_Encryption | Andrey Andreev | 1 | -3/+3 | |
2014-02-04 | CI_Encryption: Fix some errors and add unit tests for hkdf() | Andrey Andreev | 3 | -25/+129 | |
2014-02-04 | CI_Encryption improvements | Andrey Andreev | 1 | -99/+199 | |
- HMAC authentication by default. - HKDF support. - Reduce code repetition. | |||||
2014-02-03 | [ci skip] Update info on function_usable | Andrey Andreev | 3 | -2/+12 | |
2014-02-03 | Merge pull request #2852 from noskov/develop | Andrey Andreev | 1 | -0/+10 | |
Add index.html to /application/language | |||||
2014-02-03 | Add index.html to /application/language | Serge Noskov | 1 | -0/+10 | |
2014-02-03 | Introducing CI_Encryption (a CI_Encrypt replacement) | Andrey Andreev | 1 | -0/+718 | |
2014-01-30 | Previous 2 commits were just dumb | Andrey Andreev | 2 | -3/+3 | |
2014-01-30 | Fix a syntax error from last commit | Andrey Andreev | 1 | -1/+1 | |
2014-01-30 | Some fail-safe pdo_pgsql adjustments | Andrey Andreev | 2 | -2/+7 | |
2014-01-29 | [ci skip] Fix broken links | Andrey Andreev | 4 | -7/+7 | |
2014-01-29 | [ci skip] Fix /readme.rst links | Andrey Andreev | 1 | -2/+2 | |
2014-01-28 | Fix #2845 | Andrey Andreev | 1 | -1/+1 | |
2014-01-28 | Fix #2844 | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Add <math> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Previous commit caused side effects ... | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Fix CI_Security::_remove_evil_attributes() being way too aggressive | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Re-add 'on\w*' to evil attributes (rel #2667) | Andrey Andreev | 1 | -2/+1 | |
2014-01-25 | Partially fix #2667 | Andrey Andreev | 1 | -2/+8 | |
2014-01-24 | [ci skip] Add a link to PHP bug 54709 in is_really_writable()'s docblock | Andrey Andreev | 1 | -0/+1 | |
2014-01-24 | CI_Security: Also add <svg> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | CI_Security: Add <select> and <keygen> tags to the list of 'naughty' HTML ↵ | Andrey Andreev | 1 | -1/+1 | |
elements | |||||
2014-01-24 | Fix syntax errors | Andrey Andreev | 1 | -2/+2 | |
2014-01-24 | CI_Security: Add 'form' and 'xlink:href' to evil attributes | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | Add &newline; and &tab; to CI_Security:: | Andrey Andreev | 1 | -1/+3 | |
2014-01-24 | Righting a wrong in the Session library | Andrey Andreev | 6 | -69/+90 | |
- Change userdata(), flashdata(), tempdata() to return all the respective data when no parameter is passed. - Revert the addition of all_flashdata(). - Deprecate all_userdata(). - Fix related changelog entries that were all inconsistent. | |||||
2014-01-24 | [ci skip] AND -> && | Andrey Andreev | 1 | -1/+1 | |
2014-01-23 | Fix #2836 | Andrey Andreev | 1 | -1/+1 | |
2014-01-22 | CI_Security::_decode_entity() to replace dangerous HTML5 entities | Andrey Andreev | 2 | -2/+21 | |
Related to issue #2771 | |||||
2014-01-21 | Add <button> to the list of 'naugthy' html elements in CI_Security::xss_clean() | Andrey Andreev | 1 | -2/+2 | |
2014-01-21 | Merge branch 'feature/dbforge_table_attributes' into develop | Andrey Andreev | 6 | -24/+114 | |
2014-01-21 | SQLSRV improvements | Andrey Andreev | 3 | -3/+69 | |
Mainly for performance (issue #2474), but also added a 'scrollable' configuration flag and auto-detection for SQLSRV_CURSOR_CLIENT_BUFFERED (only available since SQLSRV 3). | |||||
2014-01-20 | Add support for optional table attributes to CI_DB_forge::create_table() | Andrey Andreev | 6 | -24/+114 | |
Supersedes PRs #989, #2776 Related issue: #41 | |||||
2014-01-20 | Fix #2729 | Andrey Andreev | 2 | -2/+4 | |
2014-01-20 | Fix #2737 | Andrey Andreev | 2 | -21/+28 | |