Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2014-06-06 | Merge remote-tracking branch 'remotes/upstream/2.2-stable' into working | Florian Pritz | 1 | -1/+1 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> Conflicts: system/libraries/Session.php user_guide/ | |||||
2014-05-31 | Changelog messages, bump year in copyright notices | Andrey Andreev | 1 | -1/+1 | |
2013-09-22 | Merge tag '2.1.4' | Florian Pritz | 1 | -7/+6 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> Conflicts: application/config/migration.php user_guide/changelog.html | |||||
2013-09-16 | Remove executable bits | Florian Pritz | 1 | -0/+0 | |
Signed-off-by: Florian Pritz <bluewind@xinu.at> | |||||
2013-07-08 | Revert "Updating User Guide for 2.1.4." | Wes Baker | 1 | -1/+1 | |
This reverts commit c5f99fdcc5c4a918b5b8fe3ddbd56ab25ad1c22b. Signed-off-by: Wes Baker <wes@wesbaker.com> | |||||
2013-07-08 | Updating User Guide for 2.1.4. | Wes Baker | 1 | -1/+1 | |
2013-07-05 | Added small improvement to the _remove_evil_attributes function | brian978 | 1 | -7/+6 | |
Signed-off-by: brian978 <dbrian89@yahoo.com> Signed-off-by: Wes Baker <wes@wesbaker.com> Conflicts: system/core/Security.php | |||||
2012-10-06 | Backport security fixes | Andrey Andreev | 1 | -26/+25 | |
2012-06-29 | Updating XSS cleaning to better handle base64 encoded attributes. | Wes Baker | 1 | -70/+81 | |
Conflicts: system/core/Security.php | |||||
2012-05-17 | Check cookie against md5 regex. | Alexander Hofstede | 1 | -1/+1 | |
Otherwise, cookie can contain arbitrary injected code that gets sent back directly to the browser. | |||||
2011-11-14 | Tweaking the xss filter for IE <comment> tags, parameter injection, and ↵ | Pascal Kriete | 1 | -50/+41 | |
weird html5 attributes. | |||||
2011-08-15 | Added some docs to CI core files | David Behler | 1 | -44/+87 | |
2011-07-02 | backed out 648b42a75739, which was a NON-trivial whitespace commit. It ↵ | Derek Jones | 1 | -52/+52 | |
broke the Typography class's string replacements, for instance | |||||
2011-04-25 | Fixed double-space typo. | Razican | 1 | -52/+52 | |
2011-04-20 | Change in core/Security.php to match coding standards. | Greg Aker | 1 | -1/+2 | |
2011-04-11 | Fix: codeigniter-reactor/199 cookie name was overwritten with token name | patwork | 1 | -2/+4 | |
2011-04-09 | Fix: codeigniter-reactor/199 CSRF config in Security class is no longer ignored | patwork | 1 | -1/+10 | |
2011-04-05 | Moving security to core. | Pascal Kriete | 1 | -0/+820 | |