gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
83,437 Commits 12 Branches 481 Tags 2.4 GiB
MAINT_4_0_10
Commit Graph

100 Commits

Author SHA1 Message Date
Michal Čihař
8c336ba285 Update referrer <meta> to match current standards 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-20 10:46:51 +02:00
Michal Čihař
e13f9862ef Backport Content-Security-Policy from latest release 
This way it will work well on current browsers.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-20 09:44:52 +02:00
Michal Čihař
32875196f9 Add referrer CSP and <meta> tag 
This avoids leaking Referer header in modern browsers.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-20 09:38:52 +02:00
Marc Delisle
ab0dba4533 bug #4530 [security] DOM based XSS that results to a CSRF that creates a ROOT account in certain conditions 
Signed-off-by: Marc Delisle <marc@infomarc.info>
 2014-09-12 08:22:14 -04:00
Michal Čihař
da4042fb6c Display none only if protection is enabled 2013-07-30 09:40:56 +02:00
Michal Čihař
24d0eb5520 Improved protection against cross framing 
We now include CSS to hide the page and display it conditionally after
checking we're in top frame. This adds extra protection for clients who
do not support X-Frame-Options.

See also http://en.wikipedia.org/wiki/Framekiller and
https://www.owasp.org/index.php/Clickjacking_Defense_Cheat_Sheet
 2013-07-29 14:55:29 +02:00
Michal Čihař
240b8332db Readd AllowThirdPartyFraming option 
We want by default no framing of phpMyAdmin, but still some sites might
need to embed it, so configuration option (with appropriate security
warning) is there.

This basically reverts d7e0bed284.
 2013-07-29 14:55:22 +02:00
Michal Čihař
fad8d76f68 Include minified versions JS in git of jQuery and jQuery-UI 2013-07-08 13:00:16 +02:00
Michal Čihař
77330abaef Allow CSP for images as well 2013-06-05 10:10:48 +02:00
Michal Čihař
eb29af585a Allow customization of CSP headers 
This is useful for inserting custom javascript in header/footer files.
 2013-06-05 10:04:06 +02:00
Marc Delisle
ec6a47d8a0 bug #3957 Cookies must be enabled past this point 2013-05-28 08:46:04 -04:00
Madhura Jayaratne
60d662be34 bug #3941 Recent tables list always empty 2013-05-22 14:36:01 +05:30
J.M
1347575ee7 Fix bug #3900 CSP WARN in Firefox console 2013-05-01 17:56:04 +02:00
Madhura Jayaratne
637be71f0c Allow loading map tiles when HTTPS is not used 2013-04-13 17:23:35 +05:30
Marc Delisle
58a8e37de4 Comment about the best place to include CodeMirror 2013-04-01 07:44:03 -04:00
Kasun Chathuranga
71e96e7590 Fix bug #3835 Disabling CodeMirror in GUI settings does not actually disable it 2013-03-31 16:30:48 +05:30
Marc Delisle
7d2d883966 Fix merge conflicts 2013-03-25 19:57:27 -04:00
Michal Čihař
6c4aedbac2 Fix typo 2013-02-12 15:54:49 +01:00
Michal Čihař
5e7e416dab Merge remote-tracking branch 'origin/QA_3_5' 
Conflicts:
	libraries/header_http.inc.php
 2013-02-12 14:15:12 +01:00
Marc Delisle
bd3828754c Bug #3784 Disabling "Confirm DROP queries" in user preferences does not make the confirmations go away 2013-02-05 17:52:18 -05:00
Rouslan Placella
e486798850 Include keyhandler.js globally 2013-02-03 08:38:11 -05:00
Madhura Jayaratne
5b271e1ad8 Apply print.css to both print and print view 2013-01-25 19:45:37 +05:30
Marc Delisle
6aaafcad27 Final removal of qtip 2013-01-09 08:05:22 -05:00
Marc Delisle
3206db75e7 Continue converting to jQuery UI tooltip 2013-01-02 08:37:24 -05:00
Marc Delisle
5e8f6efd0b - port CSP policy changes done for Chrome in commit 
8c8099e2f7
- add 'unsafe-eval' due to the newer jQuery library
 2013-01-02 07:50:42 -05:00
Marc Delisle
431df615f2 Upgraded to jquery-ui-timepicker-addon 1.1.1 2013-01-01 11:50:04 -05:00
Rouslan Placella
45e181af33 Upgraded jquery drag library to v2.2 2012-12-20 18:10:56 +00:00
Rouslan Placella
501e3a9f2c Upgraded jquery and jquery-ui 2012-12-19 14:50:36 +00:00
Rouslan Placella
c9f05828f6 Fixed bug #3590624 - PHP error in Header class 2012-12-14 20:05:17 +00:00
Marc Delisle
e41e0f4a64 - use the previous idea of clicking anywhere on the bar 
- advertise this idea with the icon's link
 2012-12-09 07:08:48 -05:00
Rouslan Placella
5e33ec73d8 Use icon for scroll to top functionality 2012-12-05 20:52:55 +00:00
Rouslan Placella
6446faa2d5 Show messages from incoming request parameters 2012-11-27 15:06:05 +00:00
Rouslan Placella
2e1bc1bd8d Refactored menuPrepare and menuResize into a jQuery plugin 
Also integrated this plugin with both the main menu and the resizable
menu on the table structure page
 2012-11-24 17:25:37 +00:00
Rouslan Placella
177b459822 Fixed bug #3583315 - Query doesn't load in the querywindow when clicking on edit 2012-11-19 23:36:05 +00:00
Rouslan Placella
9db53f4c02 Use jquery.debounce instead of custom code to speed up navigation scroll and resize handlers 2012-11-11 15:45:28 +00:00
Rouslan Placella
c573b0c566 Moved setUrlHash module into ajax.js 2012-11-06 15:20:53 +00:00
Michal Čihař
8f35f7c9d7 Theme mighe be not available in fatal error case 2012-11-01 09:12:54 +01:00
Rouslan Placella
6e51172183 Update libraries/Header.class.php 2012-10-31 11:33:17 +00:00
Rouslan Placella
f08d23c688 Fixed another undefined index error 2012-10-31 11:28:53 +00:00
Rouslan Placella
f740c0b09d No output when the header is disabled 2012-10-31 09:45:04 +00:00
Rouslan Placella
08efd1e7c8 Fixed invalid function call 2012-10-30 20:29:01 +00:00
Rouslan Placella
5b0b9e42fe Update new code to use PMA_Util 2012-10-30 20:24:01 +00:00
Rouslan Placella
483dab2feb phpcs fixes 2012-10-30 20:24:01 +00:00
Rouslan Placella
34a7d63e06 Force IE out of compatibility mode 2012-10-30 20:24:00 +00:00
Rouslan Placella
753e1f3648 Initial implementation of microhistory 2012-10-30 20:24:00 +00:00
Rouslan Placella
3d8cf0f716 Dropped dead code 2012-10-30 20:24:00 +00:00
Rouslan Placella
dc04f8f80a Display the message (with the outcome of the execution of the query) after ajax page requests 2012-10-30 20:24:00 +00:00
Rouslan Placella
7356b407ad Rewrite and integration of js/common.js 2012-10-30 20:23:59 +00:00
Rouslan Placella
eedf07e915 Dropped getReloadNavigationScript(), this is already handled by Footer.class.php 2012-10-30 20:23:59 +00:00
Rouslan Placella
50266d206b Fixed updating of the title of the page 2012-10-30 20:16:58 +00:00