gian/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
105,581 Commits 12 Branches 481 Tags 2.4 GiB
2ef4fe3d84
Commit Graph

105581 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Michal Čihař
2ef4fe3d84 Use iframe sandbox for rendering HTML in transformation 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 14:15:30 +02:00
Michal Čihař
2f79bacefa Use phpseclib's Crypt module to generate encryption keys 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 14:06:39 +02:00
Michal Čihař
0d57c09bd5 Do not allow symlinks in UploadDir 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 12:50:36 +02:00
Michal Čihař
8095b837fa Hide session error messages to avoid FPD 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 12:38:32 +02:00
Michal Čihař
78bed3c444 Ensure last version is numeric 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 12:34:18 +02:00
Michal Čihař
6da13e2a1c Escape HTML in Mediawiki comments 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 12:30:58 +02:00
Michal Čihař
2ea0b722d7 Use _blank target instead of invalid _new 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 11:22:23 +02:00
Michal Čihař
3b0115a321 Adjust tests to recent changes 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 11:17:47 +02:00
Michal Čihař
3c06eede3f Add rel="noopener noreferrer" to all target="_blank" links 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 11:02:53 +02:00
Michal Čihař
2090eb57aa Merge branch 'QA_4_6' into QA_4_6-security 2016-07-12 10:42:47 +02:00
Michal Čihař
c0450b2915 Remove allowed failures test from maintenance branch 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 10:42:41 +02:00
Michal Čihař
8b5cafc9f3 Fix wrong merge resolution 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 10:38:25 +02:00
Michal Čihař
0bf21ebf72 Use whitelist rather than blacklist for URL filtering 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 10:37:25 +02:00
Michal Čihař
5873af7d75 Merge branch 'QA_4_6' into QA_4_6-security 2016-07-12 10:32:52 +02:00
Michal Čihař
b8b1bdd77e Include X-Robots-Tag header in responses 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-12 10:28:03 +02:00
José Camilo Fernandes Coelho
f28925adb0 Translated using Weblate (Portuguese) 
Currently translated at 53.9% (1731 of 3209 strings)

[CI skip]
 2016-07-12 10:25:53 +02:00
Madhura Jayaratne
cbba4f4fdb Fix XSS in server_replication.php 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2016-07-12 11:49:53 +10:00
Madhura Jayaratne
cc7d01daa7 Fix XSS in tbl_gis_visualization.php 
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
 2016-07-12 11:27:36 +10:00
Saulo Castro
64b1f13200 Translated using Weblate (Portuguese (Brazil)) 
Currently translated at 93.3% (2997 of 3209 strings)

[CI skip]
 2016-07-11 18:45:29 +02:00
Michal Čihař
660e3a177f Remove debugging code 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-11 09:33:13 +02:00
Michal Čihař
de3181277e Include only relative path in backtrace 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-11 09:18:19 +02:00
Michal Čihař
fc6ef261eb Remove Swekey support 
It is buggy and their servers are no longer working.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-11 09:02:58 +02:00
Michal Čihař
6aacd7dcfe Make proxy IP parsing aware of multiple proxies 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-11 08:22:58 +02:00
Isaac Bennetch
c4a595357f Add Secure and HttpOnly flags for session cookie setup in examples 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-07-10 22:35:38 -04:00
Michal Čihař
1ed4007689 Properly escape MySQL status variables 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-10 18:07:59 +02:00
Phongphan A Bunlom
394f77dc70 Translated using Weblate (Thai) 
Currently translated at 30.7% (986 of 3209 strings)

[CI skip]
 2016-07-09 18:45:52 +02:00
Michal Čihař
c0b2d56ac0 Use https for wiki links 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-09 09:12:43 +02:00
Michal Čihař
a97be3a604 Improve cookie encryption 
- use MAC to validate content before decryption
- create unique IV for every cookie

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-07-08 17:40:05 +02:00
Franco
68f10806ce Translated using Weblate (Spanish) 
Currently translated at 99.6% (3198 of 3209 strings)

[CI skip]
 2016-07-05 18:45:55 +02:00
Arben Çokaj
a879cd8b77 Translated using Weblate (Albanian) 
Currently translated at 100.0% (3209 of 3209 strings)

[CI skip]
 2016-07-03 03:44:09 +02:00
Bartosz Pazoła
c7fc778fad Translated using Weblate (Polish) 
Currently translated at 82.6% (2652 of 3209 strings)

[CI skip]
 2016-07-02 12:45:16 +02:00
Kyeong Su Shin
997a7bb793 Translated using Weblate (Korean) 
Currently translated at 78.1% (2508 of 3209 strings)

[CI skip]
 2016-07-01 00:44:56 +02:00
Michal Čihař
7de139b90c Properly escape generated XML export 
Many fields could contain XML markup, so we need to ensure the generated
XML is valid.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 10:54:05 +02:00
Michal Čihař
bd2080c40a Adjust test to not use HTML escaping layer 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 10:52:49 +02:00
Michal Čihař
99d7407aa2 Fix PHP export tests 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 10:30:35 +02:00
Michal Čihař
2b5915ce7b Use phpMyAdmin version in PHP export header 
Using fixed 0.2b really makes no sense.

Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 10:27:26 +02:00
Michal Čihař
a82835cf09 Generate valid PHP code even when table/database name contains PHP markup 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 10:22:39 +02:00
Michal Čihař
5491d67fb5 Avoid possible path traversal using MySQL username 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 10:05:46 +02:00
Michal Čihař
4183bab696 Send CSP headers on changelog 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 09:50:17 +02:00
Michal Čihař
9f3823a6bc Sent CSP headers for phpinfo 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-30 09:49:37 +02:00
Michal Čihař
f204208540 Move count() call outside loop 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-24 12:58:35 +02:00
Michal Čihař
52a01c4bfb Fix type conversion for numeric values 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-24 12:55:04 +02:00
Peter Chen
cfb38bbcbf Translated using Weblate (Chinese (Taiwan)) 
Currently translated at 100.0% (3209 of 3209 strings)

[CI skip]
 2016-06-24 02:59:46 +02:00
Isaac Bennetch
58534ce2fc Prepare for 4.6.4-dev 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-06-23 02:40:42 -04:00
Isaac Bennetch
f2db92434b Fix merge conflicts 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-06-23 00:28:35 -04:00
Isaac Bennetch
4f57305eab Release 4.6.3 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-06-23 00:27:15 -04:00
Isaac Bennetch
f7d1c1f463 Changelog entries for security release 
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
 2016-06-22 23:53:56 -04:00
Michal Čihař
615212a14d Do not allow javascript: links in transformation 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-22 13:28:07 +02:00
Michal Čihař
519e634a8d Merge branch 'QA_4_6' into QA_4_6-security 2016-06-22 13:10:55 +02:00
Michal Čihař
4d21b5c077 Fixed rendering of chart of columns with HTML inside 
Signed-off-by: Michal Čihař <michal@cihar.com>
 2016-06-22 13:07:32 +02:00