Tim Almdal
e82aa6dcd8
Update the xss gold file with changes to views in the last couple of commits.
2010-06-17 10:22:19 -07:00
Bharat Mediratta
ab93767e4d
Update golden file
2010-06-09 21:26:36 -07:00
Tim Almdal
fd437aec2b
Correct XSS Security Test golden file for recent changes. Update the controller_auth data file for the rename
...
of admin_comments to admin_manage_comments.
2010-06-04 14:05:26 -07:00
Bharat Mediratta
d78ea4bc0a
Checkpoint
2010-03-30 13:18:03 -07:00
Bharat Mediratta
8ab580cec1
Verified
2010-02-23 11:50:39 -08:00
Andy Staudacher
6c89bb8878
Update of reviewed XSS audit data.
2010-02-15 13:51:32 -08:00
Tim Almdal
1c0e5eaa0d
use html::purify to cleans the additional content on the admin maintence page.
2010-02-02 15:00:05 -08:00
Tim Almdal
f69493d138
Update the xss golden file to reflect the changes to the admin screen.
2010-02-02 14:51:06 -08:00
Bharat Mediratta
6963695569
Verified
2010-01-30 23:22:53 -08:00
Bharat Mediratta
df3db40ab7
Reviewed DIRTY_ATTR
2010-01-28 09:43:10 -08:00
Bharat Mediratta
86721d3884
Reviewed all DIRTY_JS entries
2010-01-28 09:40:04 -08:00
Tim Almdal
c51fe96820
Make the varible for the profile name more descriptive and clean the label
2010-01-28 09:27:27 -08:00
Tim Almdal
75aec29350
Update the xss golden file for user profile changes.
2010-01-28 08:42:14 -08:00
Tim Almdal
3b8636e529
Update the Xss_Security_Test and the Controller_Auth_Test.
2010-01-23 23:53:16 -08:00
Bharat Mediratta
51427d5404
Verified
2010-01-18 12:21:57 -08:00
Bharat Mediratta
183e65210a
Verified and updated.
2010-01-02 14:00:28 -08:00
Bharat Mediratta
6601bb29d9
Update.
2009-12-22 16:25:31 -08:00
Tim Almdal
454a96f48f
Refactor the tags to remove the REST_Controller. Partial fix for ticket #917
2009-11-25 09:08:33 -08:00
Bharat Mediratta
52b12725ea
Updated.
2009-11-24 16:35:50 -08:00
Tim Almdal
fc41d09134
Revert "Simplify the maintenance of the xss golden file by having each module contibute its own golden file to a consolidated one. This will make it easier for -contrib modules or themes to be included in the xss security test w/o having to keep modifying a central golden file."
...
This reverts commit 4fe5801c88
2009-11-18 10:54:01 -08:00
Tim Almdal
4fe5801c88
Simplify the maintenance of the xss golden file by having each module contibute its own golden file to a consolidated one. This will make it easier for -contrib modules or themes to be included in the xss security test w/o having to keep modifying a central golden file.
2009-11-18 10:34:39 -08:00
Tim Almdal
3f600d46e4
Update the xss golden file so tests pass.
2009-11-18 08:53:35 -08:00
Bharat Mediratta
9379308f91
Xss data update
2009-11-15 19:36:02 -08:00
Bharat Mediratta
64ef86a8ee
Updated xss data.
2009-11-15 19:27:35 -08:00
Chad Kieffer
d581bbbd1e
Renamed more CSS selectors from gName to g-name.
2009-10-04 15:53:00 -06:00
Chad Kieffer
3e6ba7acc3
Renamed most, if not all css selectors from gName to g-name. Moved a few shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.
2009-10-04 00:27:22 -06:00
Chad Kieffer
9145331fd4
Renamed and moved gOdd/gEven CSS classes.
2009-10-03 12:33:53 -06:00
Tim Almdal
970158f4d9
Fix unit tests by updating the xss golden file and declaring gallery_error::error_handler as static
2009-09-24 16:59:33 -07:00
Tim Almdal
65051a4bf7
Rename the default themes to wind and admin_wind. Change xss_data.txt file to reflect this move. Not completely moved yet, but the git st is rather large so lets commit this now as a base for the cleanup.
2009-09-23 15:06:17 -07:00
Andy Staudacher
2e23ae98c4
- Add theme->movie_menu() to whitelisted methods.
...
- xss_data checkpoint
2009-09-17 14:12:43 -07:00
Bharat Mediratta
823fa2fc83
Updated for url format changes applied in 2aad580f53.
2009-09-12 10:33:46 -07:00
Bharat Mediratta
991bb0c063
Update golden file.
2009-09-07 16:21:58 -07:00
Andy Staudacher
b01596c0f0
Update XSS test golden data file.
2009-09-05 18:19:13 -07:00
Andy Staudacher
f63766556a
XSS test golden data file update
2009-09-04 11:20:02 -07:00
Bharat Mediratta
1ffb5b24df
Checkpoint.
2009-09-03 11:34:02 -07:00
Andy Staudacher
fe37483aca
Update XSS scanner golden file
2009-09-01 01:29:42 -07:00
Andy Staudacher
285e2b9cbe
Update XSS test golden file
2009-08-31 21:57:15 -07:00
Andy Staudacher
26f6d8192f
Adding XSS test for href="javascript: and onclick="..."
2009-08-31 01:11:50 -07:00
Andy Staudacher
afb0111fe6
Updating golden XSS-test data file
2009-08-30 21:36:14 -07:00
Andy Staudacher
3aef420d48
Updating XSS golden file
2009-08-30 18:37:01 -07:00
Andy Staudacher
22aa0b3092
Add $theme-> methods to Xss whitelist for HTML safety.
...
Updating XSS golden file.
2009-08-30 07:25:49 -07:00
Bharat Mediratta
031a19724a
Update golden file
2009-07-30 09:55:09 -07:00
Tim Almdal
a7f4d7aced
Revert commit 078c77a62b and change the
...
tag_event:item_edit_form to use the new Form_Script library to inject
script into a form.
Signed-off-by: Tim Almdal <tnalmdal@shaw.ca >
2009-07-28 21:00:25 +08:00
Tim Almdal
2f969c80eb
Create A Forge Script element. Form_Script allows the specification
...
of either a url to a script file or in line text which will be included
in a script block.
Signed-off-by: Tim Almdal <tnalmdal@shaw.ca >
2009-07-28 12:04:23 +08:00
Bharat Mediratta
b3fe70e654
Updated.
2009-07-27 11:34:27 -07:00
Tim Almdal
078c77a62b
Add tag autocomplete to the album and photo edit pop up dialogs.
...
This required putting a wrapper view around the forms and passing
this view as the parameter to the item_edit_form event. The view
contains a $script variable that the modules can add script to be
included in the form html when rendered as part of the ajax response.
2009-07-24 14:18:15 -07:00
Tim Almdal
fa1d32e646
Partial implementation of ticket #80 . Provide auto complete and suggestions on the tag add form in the tag sidebar block. Updated the xss golden file as well. Still to do figure out how toget it into the edit popup dialog
2009-07-24 11:24:43 -07:00
Bharat Mediratta
0e9b80d2ef
Updated golden file
2009-07-23 16:20:40 -07:00
Bharat Mediratta
59e410bb79
Updated for movieplayer.html.php update
2009-07-21 07:25:34 -07:00
Bharat Mediratta
43324fd12a
Update golden file to match recent changes in event code.
2009-07-16 12:29:01 -07:00
