Commit Graph

106482 Commits

Author SHA1 Message Date
Michal Čihař
c3401ec878 Merge branch 'QA_4_6-security' into master-security 2016-07-12 12:50:54 +02:00
Michal Čihař
0d57c09bd5 Do not allow symlinks in UploadDir
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 12:50:36 +02:00
Michal Čihař
8095b837fa Hide session error messages to avoid FPD
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 12:38:32 +02:00
Michal Čihař
78bed3c444 Ensure last version is numeric
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 12:34:18 +02:00
Michal Čihař
303ace23b5 Merge branch 'QA_4_6-security' into master-security 2016-07-12 12:31:12 +02:00
Michal Čihař
6da13e2a1c Escape HTML in Mediawiki comments
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 12:30:58 +02:00
Michal Čihař
065b876c1a Merge branch 'QA_4_6-security' into master-security 2016-07-12 11:22:37 +02:00
Michal Čihař
2ea0b722d7 Use _blank target instead of invalid _new
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:22:23 +02:00
Michal Čihař
fb1884295f Merge branch 'QA_4_6-security' into master-security 2016-07-12 11:19:09 +02:00
Michal Čihař
3b0115a321 Adjust tests to recent changes
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:17:47 +02:00
Michal Čihař
3c06eede3f Add rel="noopener noreferrer" to all target="_blank" links
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:02:53 +02:00
Michal Čihař
1412fc14d1 Merge branch 'master' into master-security 2016-07-12 10:47:15 +02:00
Michal Čihař
a6eaffe11c Use https URL for tcpdf
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:46:55 +02:00
Michal Čihař
bd472d5144 Merge branch 'QA_4_6-security' into master-security 2016-07-12 10:43:29 +02:00
Michal Čihař
36ba6d9aba Merge branch 'master' into master-security 2016-07-12 10:43:10 +02:00
Michal Čihař
e3cf00b122 Merge branch 'QA_4_6' 2016-07-12 10:43:04 +02:00
Michal Čihař
2090eb57aa Merge branch 'QA_4_6' into QA_4_6-security 2016-07-12 10:42:47 +02:00
Michal Čihař
c0450b2915 Remove allowed failures test from maintenance branch
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:42:41 +02:00
Michal Čihař
27b8005fa0 Merge branch 'QA_4_6-security' into master-security 2016-07-12 10:38:34 +02:00
Michal Čihař
8b5cafc9f3 Fix wrong merge resolution
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:38:25 +02:00
Michal Čihař
3434c70a51 Merge branch 'QA_4_6-security' into master-security 2016-07-12 10:38:08 +02:00
Michal Čihař
0bf21ebf72 Use whitelist rather than blacklist for URL filtering
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:37:25 +02:00
Michal Čihař
a499487974 Merge branch 'master' into master-security 2016-07-12 10:33:42 +02:00
Michal Čihař
5873af7d75 Merge branch 'QA_4_6' into QA_4_6-security 2016-07-12 10:32:52 +02:00
Michal Čihař
0ce8cd7919 Merge branch 'QA_4_6' 2016-07-12 10:28:28 +02:00
Michal Čihař
11e772c46d Merge remote-tracking branch 'origin/QA_4_6' 2016-07-12 10:28:25 +02:00
Michal Čihař
b8b1bdd77e Include X-Robots-Tag header in responses
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:28:03 +02:00
José Camilo Fernandes Coelho
19dee09c3f Translated using Weblate (Portuguese)
Currently translated at 53.6% (1722 of 3208 strings)

[CI skip]
2016-07-12 10:26:16 +02:00
José Camilo Fernandes Coelho
f28925adb0 Translated using Weblate (Portuguese)
Currently translated at 53.9% (1731 of 3209 strings)

[CI skip]
2016-07-12 10:25:53 +02:00
Madhura Jayaratne
cbba4f4fdb Fix XSS in server_replication.php
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-07-12 11:49:53 +10:00
Madhura Jayaratne
cc7d01daa7 Fix XSS in tbl_gis_visualization.php
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2016-07-12 11:27:36 +10:00
Saulo Castro
64b1f13200 Translated using Weblate (Portuguese (Brazil))
Currently translated at 93.3% (2997 of 3209 strings)

[CI skip]
2016-07-11 18:45:29 +02:00
Saulo Castro
8c1c013abf Translated using Weblate (Portuguese (Brazil))
Currently translated at 93.1% (2988 of 3208 strings)

[CI skip]
2016-07-11 18:45:23 +02:00
Michal Čihař
152386627a Merge branch 'QA_4_6-security' into master-security 2016-07-11 09:34:05 +02:00
Michal Čihař
660e3a177f Remove debugging code
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 09:33:13 +02:00
Michal Čihař
de3181277e Include only relative path in backtrace
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 09:18:19 +02:00
Michal Čihař
0f23cac353 Merge branch 'QA_4_6-security' into master-security 2016-07-11 09:04:25 +02:00
Michal Čihař
fc6ef261eb Remove Swekey support
It is buggy and their servers are no longer working.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 09:02:58 +02:00
Michal Čihař
2b59fa3bf9 Use PMA_getIp instead of REMOTE_ADDR to get user address
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 08:38:16 +02:00
Michal Čihař
23c011df36 Move PMA_getIp to core
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 08:36:55 +02:00
Michal Čihař
08864ebc8c Remove not needed include
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 08:36:04 +02:00
Michal Čihař
8f93d41d64 Merge branch 'QA_4_6-security' into master-security 2016-07-11 08:33:45 +02:00
Michal Čihař
6aacd7dcfe Make proxy IP parsing aware of multiple proxies
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-11 08:22:58 +02:00
Isaac Bennetch
c4a595357f Add Secure and HttpOnly flags for session cookie setup in examples
Signed-off-by: Isaac Bennetch <bennetch@gmail.com>
2016-07-10 22:35:38 -04:00
Michal Čihař
1ed4007689 Properly escape MySQL status variables
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-10 18:07:59 +02:00
Phongphan A Bunlom
394f77dc70 Translated using Weblate (Thai)
Currently translated at 30.7% (986 of 3209 strings)

[CI skip]
2016-07-09 18:45:52 +02:00
Phongphan A Bunlom
7f6378605f Translated using Weblate (Thai)
Currently translated at 30.4% (977 of 3208 strings)

[CI skip]
2016-07-09 18:45:47 +02:00
Michal Čihař
57dd8e6f99 Use https for wiki links
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-09 09:14:26 +02:00
Michal Čihař
6f75f8a261 Merge branch 'QA_4_6-security' into master-security 2016-07-09 09:14:12 +02:00
Michal Čihař
c0b2d56ac0 Use https for wiki links
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-09 09:12:43 +02:00