summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)AuthorFilesLines
2015-09-17Don't allow open-ended tags to pass through xss_clean()Andrey Andreev2-4/+10
2015-09-17Refactor 'evil attributes' sanitization logicAndrey Andreev2-115/+100
2015-09-16[ci skip] Add missing changelog entryAndrey Andreev1-0/+1
2015-09-16Fix #4116Andrey Andreev2-6/+7
2015-09-16Fix typokenjis1-1/+1
2015-09-16Fix #4120Andrey Andreev2-3/+14
2015-09-15Missing character in the evil attributes patternAndrey Andreev1-1/+1
2015-09-14Another addition to tag detection patterns in xss_clean()Andrey Andreev2-1/+9
2015-09-14Close #4098Andrey Andreev2-2/+19
2015-09-14Fix #4032Andrey Andreev2-7/+10
2015-09-14Fix #4044Andrey Andreev2-5/+6
2015-09-14Fix #4109Andrey Andreev2-20/+23
2015-09-14Add 'eval' to a JS blacklist in xss_clean()Andrey Andreev1-7/+10
2015-09-14Move _remove_evil_attributes() callAndrey Andreev2-4/+17
2015-09-11Harden xss_clean() moreAndrey Andreev2-7/+44
2015-09-11Improve on previous commitAndrey Andreev2-1/+6
2015-09-11Replace the latest XSS patchesAndrey Andreev2-10/+27
2015-09-10Last commit didn't adjust a RE indexAndrey Andreev2-1/+6
2015-09-10Fix & extend 700619cebf75c4e4fcda6a2d7bea1afb84a029e4Andrey Andreev2-6/+6
2015-09-10Fix a broken unit test from 700619cebf75c4e4fcda6a2d7bea1afb84a029e4Andrey Andreev1-1/+1
2015-09-10[ci skip] Add changelog entry for #4105Andrey Andreev1-0/+1
2015-09-10Change form validation library to allow the pipe character within square brac...rich1-1/+1
2015-09-10Fix #4106Andrey Andreev2-2/+10
2015-09-07Remove unnecessary count() calls from _sanitize_globals()Andrey Andreev1-3/+3
2015-09-07Move csrf_verify() call out of _sanitize_globals()Andrey Andreev1-6/+6
2015-09-03Fix #4096Andrey Andreev2-1/+2
2015-09-02[ci skip] Improve FV language string instructionsAndrey Andreev1-1/+4
2015-09-01Enable Travis builds for 3.0-stable branchAndrey Andreev1-0/+1
2015-09-01Fix #4093Andrey Andreev3-1/+10
2015-09-01[ci skip] Correct session database setup docsAndrey Andreev2-7/+15
2015-09-01[ci skip] Reduce/improve wording of xss_clean() descriptionAndrey Andreev1-10/+5
2015-09-01[ci skip] Remove a bad advice from the Security lib docsAndrey Andreev1-4/+0
2015-09-01Merge pull request #4092 from mpmont/3.0-stableAndrey Andreev1-1/+1
2015-09-01There was an extra = sign in this fileMarco Monteiro1-1/+1
2015-08-31[ci skip] Fix #4091Andrey Andreev2-1/+2
2015-08-31Fix #4086Andrey Andreev2-13/+14
2015-08-31[ci skip] Fix incorrect routing descriptionAndrey Andreev1-2/+1
2015-08-31Fix #4073Andrey Andreev2-7/+17
2015-08-31Fix #4066Andrey Andreev3-18/+7
2015-08-20Fix #4065Andrey Andreev2-1/+2
2015-08-19[ci skip] Fix 'sqlsrv' connect failure endless loopAndrey Andreev2-7/+9
2015-08-17Allow capitals in the middle of model namesAndrey Andreev2-1/+2
2015-08-15Fix #4056Andrey Andreev2-1/+2
2015-08-15[ci skip] Fix a doc typoAndrey Andreev1-1/+1
2015-08-14[ci skip] Encryption doc fixAndrey Andreev1-1/+1
2015-08-14Fix #4052Andrey Andreev2-20/+1
2015-08-13Fix typo in commentsClaudio Galdiolo1-1/+1
2015-08-13Update config/constants.php with defined() checksAndrey Andreev3-34/+48
2015-08-10Fix path for CLI error templates in upgrade docMat Whitney1-1/+1
2015-08-07[ci skip] Partial patch for #2284Andrey Andreev2-2/+9
generated by cgit v1.2.3-24-g4f1b (git 2.32.0) at 2024-07-11 18:16:16 +0200