Michal Čihař
5a1854c2b7
Merge branch 'QA_4_6-security' into master-security
2016-09-19 11:53:49 +02:00
Michal Čihař
fbad6b9b4d
Verify value of access_time to avoid unwanted session extension
...
We need to ansure the access_time parameter is in valid range to avoid
possibility of remotely extending session validity.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-19 11:53:07 +02:00
Michal Čihař
3ba11212a3
Merge branch 'QA_4_6-security' into master-security
2016-09-02 14:41:33 +02:00
Michal Čihař
733a5d5821
Avoid rendering BB code when showing PHP/MySQL errors
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-09-02 14:36:23 +02:00
Michal Čihař
e14c334d7a
Merge branch 'QA_4_6'
2016-07-26 16:47:33 +02:00
Michal Čihař
16c4ca0daa
Properly escape configuration parameters when rendering
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-26 16:47:01 +02:00
Michal Čihař
e3d650a2bb
Merge branch 'QA_4_6'
2016-05-23 13:05:01 +02:00
Michal Čihař
11eb574242
Improve handling of logout
...
- add separate script for handling logout
- no longer require old_usr for all authentication methods
(this avoids potential information leak)
- require valid token for logout
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-05-23 13:02:21 +02:00
Durgesh
6650f7b07d
Refactor text sanitization and javascript escaping, Issue #11989 , #11988
...
Signed-off-by: Durgesh <007durgesh219@gmail.com>
2016-02-22 14:45:19 +05:30
Hugues Peccatte
178a6edd38
Add namespace on part of plugins classes.
...
Signed-off-by: Hugues Peccatte <hugues.peccatte@gmail.com>
2015-09-05 00:33:42 +02:00
