Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2015-10-30 | Fix #3201 | Andrey Andreev | 1 | -0/+5 | |
2015-10-05 | Some more intrusive XSS cleaning | Andrey Andreev | 1 | -2/+7 | |
2015-10-02 | More XSS stuff | Andrey Andreev | 1 | -1/+6 | |
2015-09-28 | Merge pull request #4125 from jim-parry/fix/lang_test | Andrey Andreev | 1 | -5/+17 | |
Improve CI_Lang tests | |||||
2015-09-21 | More XSS stuff | Andrey Andreev | 1 | -0/+16 | |
2015-09-17 | Don't allow open-ended tags to pass through xss_clean() | Andrey Andreev | 1 | -0/+1 | |
This was a regression caused by the previous commit | |||||
2015-09-17 | Refactor 'evil attributes' sanitization logic | Andrey Andreev | 1 | -23/+34 | |
Turned out pretty much impossible to do remove 'evil attributes' with just one pattern - it either breaks something else, hits pcre.backtrack_limit or causes PHP to segfault. No benchmarks made, but there shouldn't be any performance regressions since we're now trying to strip attributes only after it is determined that they are inside a tag; up until now this was done seprately for _sanitize_naughty_html() and _remove_evil_attributes(). | |||||
2015-09-14 | Another addition to tag detection patterns in xss_clean() | Andrey Andreev | 1 | -0/+5 | |
2015-09-14 | Move _remove_evil_attributes() call | Andrey Andreev | 1 | -0/+14 | |
2015-09-11 | Harden xss_clean() more | Andrey Andreev | 1 | -2/+7 | |
This time eliminate false positives for the 'naughty html' logic. | |||||
2015-09-11 | Improve on previous commit | Andrey Andreev | 1 | -0/+5 | |
2015-09-11 | Replace the latest XSS patches | Andrey Andreev | 1 | -1/+6 | |
This one fixes yet another issue, is cleaner and faster. | |||||
2015-09-10 | Last commit didn't adjust a RE index | Andrey Andreev | 1 | -0/+5 | |
2015-09-10 | Fix & extend 700619cebf75c4e4fcda6a2d7bea1afb84a029e4 | Andrey Andreev | 1 | -4/+4 | |
2015-09-10 | Fix a broken unit test from 700619cebf75c4e4fcda6a2d7bea1afb84a029e4 | Andrey Andreev | 1 | -1/+1 | |
2015-09-10 | Fix #4106 | Andrey Andreev | 1 | -0/+8 | |
2015-09-01 | Fix #4093 | Andrey Andreev | 1 | -0/+8 | |
2015-08-03 | [ci skip] Normalize tabs/spaces | Andrey Andreev | 2 | -6/+7 | |
Partial changes from PR #4016 | |||||
2015-07-22 | Fix testcases broken by b63dc1904e4f34cb48d7dce80155172c6e94d777 | Andrey Andreev | 1 | -2/+2 | |
2015-04-14 | Add test for email address with subdomain | Brett Santore | 1 | -0/+1 | |
2015-04-01 | [ci skip] Whitespace cleanup following PR #3716 | Andrey Andreev | 1 | -29/+29 | |
2015-04-01 | Merge pull request #3716 from djwoods/form_validation_tests | Andrey Andreev | 1 | -1/+249 | |
More CI_Form_validation unit tests | |||||
2015-04-01 | Style changes and variable name changes | David Woods | 1 | -22/+21 | |
2015-03-30 | Fix for parsing error in PHP 5.2 and 5.3 | David Woods | 1 | -1/+2 | |
2015-03-30 | Corrected unit tests for set_select, set_radio, and set_checkbox | David Woods | 1 | -32/+27 | |
Coverage now at ~75% | |||||
2015-03-30 | [ci skip] Whitespace cleanup following PRs #3713 #3714 | Andrey Andreev | 2 | -16/+15 | |
2015-03-30 | Merge pull request #3713 from ahnh/UnitTest_Lang_test | Andrey Andreev | 1 | -0/+26 | |
CI_Lang unit tests | |||||
2015-03-30 | changed to lowercase array. | Heesung Ahn | 1 | -1/+1 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-30 | changed to lowercase array and space. | Heesung Ahn | 1 | -3/+3 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-30 | updated array style and removed assert true | Heesung Ahn | 1 | -2/+5 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-30 | added spaces | Heesung Ahn | 1 | -1/+1 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-30 | Added more unit tests to CI_Form_validation | David Woods | 1 | -0/+147 | |
Unit tests for set_select, set_checkbox, and set_radio currently all fail for the same reason. Signed-off-by: David Woods <d.woods92@gmail.com> | |||||
2015-03-29 | Improved unit test code coverage. | Heesung Ahn | 1 | -0/+46 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-29 | removed space | Heesung Ahn | 1 | -1/+1 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-29 | Increased code coverage | Heesung Ahn | 1 | -1/+24 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-28 | Added more units tests for Form_validation | David Woods | 1 | -2/+108 | |
Up to 65% coverage Signed-off-by: David Woods <d.woods92@gmail.com> | |||||
2015-03-26 | Remove an unnecessary check | Andrey Andreev | 1 | -2/+1 | |
#3700 #3706 | |||||
2015-03-26 | Add FSCommand and seekSegmentTime to evil HTML attributes list | Andrey Andreev | 1 | -0/+2 | |
2015-03-26 | Polish changes from PR #3678 | Andrey Andreev | 1 | -91/+63 | |
... and make it run on 5.2. | |||||
2015-03-26 | Merge pull request #3678 from djwoods/unit-test/form-validation | Andrey Andreev | 1 | -0/+373 | |
Added CI_Form_validation unit tests | |||||
2015-03-22 | Corrected invalid matches, differs, and set_data test cases | David Woods | 1 | -34/+61 | |
Signed-off-by: David Woods <d.woods92@gmail.com> | |||||
2015-03-21 | [ci skip] Whitespace cleanup following PR #3682 | Andrey Andreev | 1 | -20/+20 | |
2015-03-21 | Changed scenario based tests to unit tests | David Woods | 1 | -148/+175 | |
Added tests for set_data() & set_message() Signed-off-by: David Woods <d.woods92@gmail.com> | |||||
2015-03-20 | updated based on comment | Heesung Ahn | 1 | -2/+2 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-19 | updated based on comment | Heesung Ahn | 1 | -2/+1 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-19 | minor update | Heesung Ahn | 1 | -2/+3 | |
Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-18 | Updated CI_Input unit test and fixed error "undefined offset" caused by ↵ | Heesung Ahn | 1 | -5/+56 | |
using the same variable name, $i, twice for for loop inside for loop. Signed-off-by:Heesung Ahn <ahn.heesung@gmail.com> | |||||
2015-03-18 | Switched spaces to tabs on the few lines that were missed from previous ↵ | David Woods | 1 | -7/+7 | |
refactors Signed-off-by: David Woods <d.woods92@gmail.com> | |||||
2015-03-18 | Fixed bug of clearing POST array before every test. | David Woods | 1 | -12/+14 | |
Signed-off-by: David Woods <d.woods92@gmail.com> | |||||
2015-03-18 | Corrected incorrect assertion in test_rule_valid_base64 | David Woods | 1 | -1/+1 | |
Signed-off-by: David Woods <d.woods92@gmail.com> |