Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-05-17 | Check cookie against md5 regex. | Alexander Hofstede | 1 | -1/+1 | |
Otherwise, cookie can contain arbitrary injected code that gets sent back directly to the browser. | |||||
2011-11-14 | Tweaking the xss filter for IE <comment> tags, parameter injection, and ↵ | Pascal Kriete | 1 | -50/+41 | |
weird html5 attributes. | |||||
2011-08-15 | Added some docs to CI core files | David Behler | 1 | -44/+87 | |
2011-07-02 | backed out 648b42a75739, which was a NON-trivial whitespace commit. It ↵ | Derek Jones | 1 | -52/+52 | |
broke the Typography class's string replacements, for instance | |||||
2011-04-25 | Fixed double-space typo. | Razican | 1 | -52/+52 | |
2011-04-20 | Change in core/Security.php to match coding standards. | Greg Aker | 1 | -1/+2 | |
2011-04-11 | Fix: codeigniter-reactor/199 cookie name was overwritten with token name | patwork | 1 | -2/+4 | |
2011-04-09 | Fix: codeigniter-reactor/199 CSRF config in Security class is no longer ignored | patwork | 1 | -1/+10 | |
2011-04-05 | Moving security to core. | Pascal Kriete | 1 | -0/+820 | |