Bharat Mediratta 0dc184e99f Overload url::current() and url::merge() to make the current url XSS ...

safe.  Add tests to make sure that it doesn't relapse with future
Kohana changes.  Fixes ticket #983.

Ref: http://gallery.menalto.com/node/93738

2010-01-18 11:10:37 -08:00

..

akismet

Updated for K24

2009-12-21 11:30:34 -08:00

comment

Don't pass MY_ORM::original() to update event handlers, since after

2010-01-16 00:13:28 -08:00

digibug

Convert a bunch of leftover kohana::show_404 calls to throw

2009-12-23 20:51:33 -08:00

exif

Update database query.

2009-12-06 21:34:48 -08:00

forge/libraries

Modify Forge to accept multiple hidden params (this was broken by an

2009-12-31 15:49:43 -08:00

g2_import

Clean the G2 base url so that we can't leak XSS vulnerabilities that

2010-01-02 14:00:00 -08:00

gallery

Overload url::current() and url::merge() to make the current url XSS

2010-01-18 11:10:37 -08:00

gallery_unit_test

Fix some function definitions (they should be static)

2009-12-22 15:41:47 -08:00

image_block

Clean up validation the check for duplicate names or slugs, finish converting the rest API to Kohana 2.4

2009-12-27 08:32:12 -08:00

info

Revert "Simplify the maintenance of the xss golden file by having each module contibute its own golden file to a consolidated one. This will make it easier for -contrib modules or themes to be included in the xss security test w/o having to keep modifying a central golden file."

2009-11-18 10:54:01 -08:00

kohana23_compat

Convert tabs to spaces. Enough to get the file structure test to

2009-12-22 15:36:36 -08:00

notification

Remove debug code.

2010-01-16 00:19:35 -08:00

organize

Merge branch 'master' into talmdal_dev

2009-12-27 08:35:19 -08:00

recaptcha

Revert "Try an new approach to extending forms. Create an extend_form event. For the first attempt replace the comment_add_form and item_add_form events."

2009-11-09 11:52:43 -08:00

rest

Fix for ticket #972 and more. In Kohana 2.4, ORM::delete_all ignores any where

2010-01-09 23:57:16 -08:00

rss

Overload url::current() and url::merge() to make the current url XSS

2010-01-18 11:10:37 -08:00

search

Fix for ticket #972 and more. In Kohana 2.4, ORM::delete_all ignores any where

2010-01-09 23:57:16 -08:00

server_add

Fix for ticket #972 and more. In Kohana 2.4, ORM::delete_all ignores any where

2010-01-09 23:57:16 -08:00

slideshow

Fix for ticket #933. Move the inclusion of the piclens script from the theme::header callback to the theme::page_bottom callback.

2010-01-08 11:06:54 -08:00

tag

$offset should be null by default, not 0. Hold over bug from the K24 migration.

2010-01-05 12:05:37 -08:00

unit_test

Fix the translation keys to not require "unit_test." as a prefix.

2009-12-21 12:07:20 -08:00

user

Don't pass MY_ORM::original() to update event handlers, since after

2010-01-16 00:13:28 -08:00

watermark

Normalize capitalization ticket #596

2009-10-28 12:15:52 -07:00