Bharat Mediratta 9e6be40e31 Add viewable() protection to children() and children_count() calls. ...

This is not currently necessary (nor is it a security hole) because we
don't constrain permissions at the child level in the core, but it
makes our security audits easier and will enable the scenario where
somebody writes a module to add per-photo permissions.

2009-09-21 20:47:55 -07:00

..

akismet

Change the module installer so that you don't need to provide your own

2009-09-05 13:39:30 -07:00

comment

Rename $comment_model to $comments, this time without stomping on the

2009-09-01 20:40:18 -07:00

digibug

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

exif

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00

forge/libraries

XSS escape in form helper and forge where missing.

2009-09-01 01:17:39 -07:00

g2_import

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

gallery

Add viewable() protection to children() and children_count() calls.

2009-09-21 20:47:55 -07:00

gallery_unit_test

Run 'graphics::choose_default_toolkit();' to pick a toolkit, which we

2009-09-02 11:53:10 -07:00

image_block

Change the module installer so that you don't need to provide your own

2009-09-05 13:39:30 -07:00

info

Change the module installer so that you don't need to provide your own

2009-09-05 13:39:30 -07:00

notification

Convert a couple of instances of Item_Model::url(array(), true) to Item_Model::abs_url()

2009-09-10 21:33:04 -07:00

organize

Reset the margins when the mouse is over a thumbnail when dragging. When the border is displayed then adjust the margin to account for the border. Just hidding the border causes things to move.

2009-09-10 21:26:07 -07:00

recaptcha

Change the module installer so that you don't need to provide your own

2009-09-05 13:39:30 -07:00

rss

Change the module installer so that you don't need to provide your own

2009-09-05 13:39:30 -07:00

search

Move specialized (pretty) url generation back into Item_Model so that

2009-09-08 13:44:52 -07:00

server_add

Fix indentation.

2009-09-06 11:26:20 -07:00

slideshow

Change the module installer so that you don't need to provide your own

2009-09-05 13:39:30 -07:00

tag

Remove unused $feed->link.

2009-09-08 17:05:38 -07:00

unit_test

Update Kohana to r4374

2009-05-29 12:00:49 -07:00

user

Use abs_url() inside url::redirect() calls so that we don't just wind

2009-09-10 21:31:50 -07:00

watermark

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00