Tim Almdal dcdd44109b fix the expected return value of photos controller

2009-09-03 01:11:28 -07:00

..

akismet

XSS review fixes (mostly adding missing html::mark_clean()) calls.

2009-08-31 02:12:01 -07:00

comment

Rename $comment_model to $comments, this time without stomping on the

2009-09-01 20:40:18 -07:00

digibug

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

exif

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00

forge/libraries

XSS escape in form helper and forge where missing.

2009-09-01 01:17:39 -07:00

g2_import

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

gallery

fix the expected return value of photos controller

2009-09-03 01:11:28 -07:00

gallery_unit_test

Run 'graphics::choose_default_toolkit();' to pick a toolkit, which we

2009-09-02 11:53:10 -07:00

image_block

Add quotes around all values that contain spaces in them, and add a

2009-07-13 10:36:55 -07:00

info

Update all code to use helper method html::clean(), html::purify(), ... instead of SafeString directly.

2009-08-29 22:54:20 -07:00

notification

XSS review fixes (mostly adding missing html::mark_clean()) calls.

2009-08-31 02:12:01 -07:00

organize

Add an icon to the context menu option.

2009-08-31 23:27:46 -07:00

recaptcha

Add missing mark_clean() for t() calls with %attr parameter.

2009-09-01 12:14:23 -07:00

rss

Allow the RSS feed page size to be customizeable, up to 100 items (to

2009-09-01 20:13:23 -07:00

search

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00

server_add

Rename mark_safe() to mark_clean()

2009-08-31 00:42:18 -07:00

slideshow

Allow the RSS feed page size to be customizeable, up to 100 items (to

2009-09-01 20:13:23 -07:00

tag

Fix XSS in tags JS

2009-09-01 01:12:02 -07:00

unit_test

Update Kohana to r4374

2009-05-29 12:00:49 -07:00

user

XSS / style fixes for newly detected issues (after fixing XSS scanner)

2009-09-01 01:28:52 -07:00

watermark

Fix XSS vectors in HTML attributes (mostly t() calls)

2009-08-31 21:51:57 -07:00