Commit Graph

22 Commits

Author SHA1 Message Date
Durgesh
6650f7b07d Refactor text sanitization and javascript escaping, Issue #11989, #11988
Signed-off-by: Durgesh <007durgesh219@gmail.com>
2016-02-22 14:45:19 +05:30
Michal Čihař
2a9fb73f92 Remove PmaAbsoluteUri from redirects
This is no longer needed as per RFC 7231.

Issue #11412

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-02-03 14:32:14 +01:00
Marc Delisle
9ee3931c09 Remove some unnecessary string concatenations
https://github.com/dseguy/clearPHP/blob/master/rules/no-unnecessary-string-concatenation.md

Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-12-03 10:43:10 -05:00
Marc Delisle
cd09765675 Port content spoofing fix
Signed-off-by: Marc Delisle <marc@infomarc.info>
2015-10-23 06:50:04 -04:00
Madhura Jayaratne
7199825abd Long links may be converted to forms
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2015-05-07 17:53:50 +05:30
Rahul Kadyan
4d308ba364 Remove unneeded closing tags
Closing tags at the end of file are not mandatory. It is often
suggested to omit to closing tags at the end of file to prevent
unwanted effects as PHP will start output buffering if there is
any character after closing tag.

Reference: http://php.net/manual/en/language.basic-syntax.phptags.php

Signed-off-by: Rahul Kadyan <hi@znck.me>
2015-03-06 23:37:35 +05:30
Michal Čihař
1daa32fb97 bug #4612 [security] XSS vulnerability in redirection mechanism
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-12-03 08:29:55 -05:00
Michal Čihař
d938eb9eb1 Simplify url redirectory code, no need for two branchs 2014-02-11 09:15:28 +01:00
Michal Čihař
5e9cf18073 Improvements in URL redirector
- do not concatenate message to allow better translation
- avoid possbile XSS
2014-02-11 09:14:42 +01:00
Madhura Jayaratne
09dec45ffa Remove commented debugging code. Replace tabs with spaces
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
2014-02-08 12:36:08 +05:30
Marc Delisle
5c5673f4cf Fix coding style; add localization
Signed-off-by: Marc Delisle <marc@infomarc.info>
2014-02-07 12:49:57 -05:00
Dhananjay
0a18d86059 Fix for bug#4237.
Signed-off-by: Dhananjay <dhananjaynakrani@gmail.com>
2014-02-07 11:56:46 +05:30
Dieter Adriaenssens
4c88729902 fix coding style: true is lower case 2013-09-12 17:50:58 +02:00
Michal Čihař
9cc5846341 Fix URL redirector in case of fatal erorrs 2013-09-12 09:53:06 +02:00
J.M
f96c97984e Merge branch 'QA_3_5' 2012-07-01 17:27:19 +02:00
J.M
18b8f215c6 Backport commit 4521b28 to fix bug #3527531, die after sending Location header in url.php 2012-07-01 17:17:35 +02:00
Michal Čihař
fe9de9d568 Add missing @package tag 2012-06-01 14:36:04 +02:00
Madhura Jayaratne
8243eace0f Wrap some long lines 2012-04-30 23:23:50 +05:30
Dieter Adriaenssens
3a3da2987e add vim directive for indenting with spaces 2012-04-11 16:18:53 +02:00
Michal Čihař
ecfc8ba4f7 Make redirector require valid token 2011-05-20 09:01:20 +02:00
Michal Čihař
14ebfdbe8e No need for authentication on url.php (bug#3168011). 2011-01-31 15:22:25 +01:00
Michal Čihař
dc0c6938b2 [security] Redirect external links to avoid Referer leakage. 2011-01-28 13:22:41 +01:00