Bharat Mediratta 03c5c11775 Allow the RSS feed page size to be customizeable, up to 100 items (to ...

mitigate DoS attacks).

Have PicLens request a 100-item page to mitigate the bug where it
refuses to load the 2nd page.

Mitigates #23.

2009-09-01 20:13:23 -07:00

..

akismet

XSS review fixes (mostly adding missing html::mark_clean()) calls.

2009-08-31 02:12:01 -07:00

comment

XSS / style fixes for newly detected issues (after fixing XSS scanner)

2009-09-01 01:28:52 -07:00

digibug

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

exif

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00

forge/libraries

XSS escape in form helper and forge where missing.

2009-09-01 01:17:39 -07:00

g2_import

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

gallery

Merge commit 'upstream/master'

2009-09-01 01:30:45 -07:00

gallery_unit_test

Update test code to match the change made in 47810c9aec

2009-06-10 00:53:16 -07:00

image_block

Add quotes around all values that contain spaces in them, and add a

2009-07-13 10:36:55 -07:00

info

Update all code to use helper method html::clean(), html::purify(), ... instead of SafeString directly.

2009-08-29 22:54:20 -07:00

notification

XSS review fixes (mostly adding missing html::mark_clean()) calls.

2009-08-31 02:12:01 -07:00

organize

Add an icon to the context menu option.

2009-08-31 23:27:46 -07:00

recaptcha

XSS / style fixes for newly detected issues (after fixing XSS scanner)

2009-09-01 01:28:52 -07:00

rss

Allow the RSS feed page size to be customizeable, up to 100 items (to

2009-09-01 20:13:23 -07:00

search

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00

server_add

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

slideshow

Allow the RSS feed page size to be customizeable, up to 100 items (to

2009-09-01 20:13:23 -07:00

tag

Fix XSS in tags JS

2009-09-01 01:12:02 -07:00

unit_test

Update Kohana to r4374

2009-05-29 12:00:49 -07:00

user

XSS / style fixes for newly detected issues (after fixing XSS scanner)

2009-09-01 01:28:52 -07:00

watermark

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00