Merge branch 'QA_4_6'
This commit is contained in:
commit
ddb16a9ca1
@ -58,6 +58,7 @@ phpMyAdmin - ChangeLog
|
||||
- issue #12545 Proper parsing of CREATE TABLE ... PARTITION queries
|
||||
- issue #12473 Code can throw unhandled exception
|
||||
- issue #12550 Do not try to keep alive session even after expiry
|
||||
- issue #12512 Fixed rendering BBCode links in setup
|
||||
|
||||
4.6.4 (2016-08-16)
|
||||
- issue [security] Weaknesses with cookie encryption, see PMASA-2016-29
|
||||
|
||||
@ -53,6 +53,14 @@ class Sanitize
|
||||
'./server_privileges.php?',
|
||||
'./tbl_structure.php?',
|
||||
);
|
||||
// Adjust path to setup script location
|
||||
if (defined('PMA_SETUP')) {
|
||||
foreach ($valid_starts as $key => $value) {
|
||||
if (substr($value, 0, 2) === './') {
|
||||
$valid_starts[$key] = '.' . $value;
|
||||
}
|
||||
}
|
||||
}
|
||||
if ($other) {
|
||||
$valid_starts[] = 'mailto:';
|
||||
$valid_starts[] = 'ftp://';
|
||||
|
||||
Loading…
Reference in New Issue
Block a user