Bharat Mediratta 0a66ef9cc7 Don't allow users to change the file extension of photos/movies ...

If you can change the extension, then you can alter the way the server
handles the file, which is a security problem.  So for example, you
can change a .JPG to a .PHP and then if you put some malicious PHP
code in the EXIF data, you can get the server to execute
it. Vulnerability is low because only users who have edit permissions
could do this.

Fixes ticket #846

2009-10-13 10:36:50 -07:00

..

config

Refactor interaction with the purifier module so that the API is

2009-09-03 11:25:02 -07:00

controllers

Don't allow users to change the file extension of photos/movies

2009-10-13 10:36:50 -07:00

css

Renamed most, if not all css selectors from gName to g-name. Moved a few shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.

2009-10-04 00:27:22 -06:00

helpers

Don't allow users to change the file extension of photos/movies

2009-10-13 10:36:50 -07:00

hooks

Create a gallery error handler that traps php errors and rethrows them as Exceptions. This fixes ticket #763

2009-09-22 14:25:52 -07:00

images

Swap Jakob's placeholder in for mine.

2009-06-16 19:50:26 -07:00

js

Renamed most, if not all css selectors from gName to g-name. Moved a few shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.

2009-10-04 00:27:22 -06:00

libraries

Renamed most, if not all css selectors from gName to g-name. Moved a few shared images from wind to lib. Deleted unused images in the admin_wind. This will likely break a few ajax features.

2009-10-04 00:27:22 -06:00

models

Make the slug field required for all items.

2009-10-11 11:16:07 -07:00

tests

Renamed more CSS selectors from gName to g-name.

2009-10-04 15:53:00 -06:00

views

Replaced most clear fix hacks with generic class.

2009-10-07 00:46:02 -06:00

module.info

Correct version numbers for image_block and info modules, they inadvertently got set to 2, they should be 1

2009-09-30 18:04:30 -07:00