Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-02-07 | Use is_really_writable() in captcha helper | Andrey Andreev | 1 | -1/+1 | |
2014-02-07 | Fix conflicts | Andrey Andreev | 0 | -0/+0 | |
2014-02-07 | Use is_really_writable() in get_file_info() | Andrey Andreev | 1 | -2/+1 | |
2014-02-07 | Merge pull request #2859 from vivekdinesh/typo-fix | Andrey Andreev | 1 | -1/+1 | |
Typo Fix | |||||
2014-02-07 | Typo Fix | Vivek Dinesh | 1 | -1/+1 | |
Signed-off-by: Vivek Dinesh <vivekdinesh5@gmail.com> | |||||
2014-02-07 | CI_Encryption: Optimizations and test cases | Andrey Andreev | 3 | -92/+324 | |
2014-02-06 | Merge pull request #2857 from vivekdinesh/typo-fix | Andrey Andreev | 1 | -1/+1 | |
Typo Fix | |||||
2014-02-06 | Typo Fix | Vivek Dinesh | 1 | -1/+1 | |
Signed-off-by: Vivek Dinesh <vivekdinesh5@gmail.com> | |||||
2014-02-06 | Merge changes from develop | Andrey Andreev | 3 | -3/+12 | |
2014-02-06 | Make CI_Session's HMAC comparison time-attack-safe | Andrey Andreev | 1 | -1/+9 | |
2014-02-06 | CI_Encryption: CAST-128/CAST5 and RC4/ARCFour compatibility | Andrey Andreev | 2 | -15/+73 | |
2014-02-06 | CI_Encryption: Time-attack-safe HMAC verification | Andrey Andreev | 1 | -4/+18 | |
2014-02-05 | Fix #2856 | Andrey Andreev | 2 | -2/+3 | |
2014-02-05 | CI_Encryption: HMAC to not be derived from the encryption key | Andrey Andreev | 2 | -62/+62 | |
2014-02-05 | More CI_Encryption improvements | Andrey Andreev | 2 | -49/+10 | |
- Make OpenSSL the default driver if available (because MCrypt is stupid). - Require MCRYPT_DEV_URANDOM for the MCrypt availability check (because security; also, incidentally - it's faster that way ;)). | |||||
2014-02-05 | CI_Encryption: More MCrypt/OpenSSL compatibility and get rid of the ↵ | Andrey Andreev | 2 | -30/+115 | |
MCRYPT_MODE_* constants | |||||
2014-02-05 | CI_Encryption: Add Blowfish to compatibility list | Andrey Andreev | 2 | -12/+14 | |
2014-02-05 | CI_Encryption: Work around MCrypt's dumb behavior in ECB mode | Andrey Andreev | 1 | -49/+65 | |
2014-02-05 | Merge branch 'develop' into feature/encryption | Andrey Andreev | 4 | -2/+22 | |
2014-02-05 | Integrate CI_Encryption into the framework | Andrey Andreev | 5 | -36/+61 | |
TODO: Add documentation in user_guide_src/source/libraries/encryption.rst | |||||
2014-02-04 | CI_Encryption: Remove ARCFour from aliased ciphers due ... | Andrey Andreev | 1 | -4/+2 | |
Seems like there are some issues with it | |||||
2014-02-04 | CI_Encryption: Fix more errors and add a 'portability' test case | Andrey Andreev | 2 | -18/+67 | |
2014-02-04 | Fix a logical error in CI_Encryption | Andrey Andreev | 1 | -3/+3 | |
2014-02-04 | CI_Encryption: Fix some errors and add unit tests for hkdf() | Andrey Andreev | 3 | -25/+129 | |
2014-02-04 | CI_Encryption improvements | Andrey Andreev | 1 | -99/+199 | |
- HMAC authentication by default. - HKDF support. - Reduce code repetition. | |||||
2014-02-03 | [ci skip] Update info on function_usable | Andrey Andreev | 3 | -2/+12 | |
2014-02-03 | Merge pull request #2852 from noskov/develop | Andrey Andreev | 1 | -0/+10 | |
Add index.html to /application/language | |||||
2014-02-03 | Add index.html to /application/language | Serge Noskov | 1 | -0/+10 | |
2014-02-03 | Introducing CI_Encryption (a CI_Encrypt replacement) | Andrey Andreev | 1 | -0/+718 | |
2014-01-30 | Previous 2 commits were just dumb | Andrey Andreev | 2 | -3/+3 | |
2014-01-30 | Fix a syntax error from last commit | Andrey Andreev | 1 | -1/+1 | |
2014-01-30 | Some fail-safe pdo_pgsql adjustments | Andrey Andreev | 2 | -2/+7 | |
2014-01-29 | [ci skip] Fix broken links | Andrey Andreev | 4 | -7/+7 | |
2014-01-29 | [ci skip] Fix /readme.rst links | Andrey Andreev | 1 | -2/+2 | |
2014-01-28 | Fix #2845 | Andrey Andreev | 1 | -1/+1 | |
2014-01-28 | Fix #2844 | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Add <math> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-25 | Previous commit caused side effects ... | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Fix CI_Security::_remove_evil_attributes() being way too aggressive | Andrey Andreev | 1 | -2/+2 | |
2014-01-25 | Re-add 'on\w*' to evil attributes (rel #2667) | Andrey Andreev | 1 | -2/+1 | |
2014-01-25 | Partially fix #2667 | Andrey Andreev | 1 | -2/+8 | |
2014-01-24 | Merge pull request #2839 from iBotPeaches/feature/user-guide-cleanup | Andrey Andreev | 1 | -1/+1 | |
fix warning (unknown session) | |||||
2014-01-24 | fix warning | Connor Tumbleson | 1 | -1/+1 | |
2014-01-24 | [ci skip] Add a note to the is_really_writable() docs | Andrey Andreev | 1 | -3/+5 | |
2014-01-24 | Merge branch 'develop' into feature/user-guide-cleanup | Andrey Andreev | 2 | -3/+6 | |
2014-01-24 | [ci skip] Add a link to PHP bug 54709 in is_really_writable()'s docblock | Andrey Andreev | 1 | -0/+1 | |
2014-01-24 | CI_Security: Also add <svg> to 'naughty' HTML elements | Andrey Andreev | 1 | -1/+1 | |
2014-01-24 | CI_Security: Add <select> and <keygen> tags to the list of 'naughty' HTML ↵ | Andrey Andreev | 1 | -1/+1 | |
elements | |||||
2014-01-24 | Fix syntax errors | Andrey Andreev | 1 | -2/+2 | |
2014-01-24 | CI_Security: Add 'form' and 'xlink:href' to evil attributes | Andrey Andreev | 1 | -1/+1 | |