From f82e51cd8f46b112c3c400d43db9044854a8e805 Mon Sep 17 00:00:00 2001 From: Greg Aker Date: Wed, 14 Apr 2010 19:33:50 -0500 Subject: Update to File Upload library to return boolean on do_xss_clean(). --- user_guide/changelog.html | 1 + user_guide/libraries/file_uploading.html | 6 ++++++ 2 files changed, 7 insertions(+) (limited to 'user_guide') diff --git a/user_guide/changelog.html b/user_guide/changelog.html index 5e0f5ae05..25b3b1744 100644 --- a/user_guide/changelog.html +++ b/user_guide/changelog.html @@ -93,6 +93,7 @@ Hg Tag:

  • The Unit Test Class now has an optional "notes" field available to it, and allows for discrete display of test result items using $this->unit->set_test_items().
  • Added a $xss_clean class variable to the XMLRPC library, enabling control over the use of the Security library's xss_clean() method.
  • Added a download() method to the FTP library
    • +
  • Changed do_xss_clean() to return FALSE if the uploaded file fails XSS checks.
  • Database diff --git a/user_guide/libraries/file_uploading.html b/user_guide/libraries/file_uploading.html index d143f5b6e..061d55627 100644 --- a/user_guide/libraries/file_uploading.html +++ b/user_guide/libraries/file_uploading.html @@ -318,6 +318,12 @@ $this->upload->initialize($config); TRUE/FALSE (boolean) If set to TRUE, any spaces in the file name will be converted to underscores. This is recommended. + +xss_clean +FALSE +TRUE/FALSE (boolean) +If set to TRUE, the files will be tested for XSS vulnerabilities. + -- cgit v1.2.3-24-g4f1b