Michal Čihař
04156efeb0
Ensure widht and height are integers
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-13 10:53:51 +02:00
Michal Čihař
31546255f3
Ensure widht and height are integers
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-13 10:51:53 +02:00
Michal Čihař
14fd275811
Use iframe sandbox for rendering HTML in transformation
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 14:13:14 +02:00
Michal Čihař
0a4cdc25f1
Use _blank target instead of invalid _new
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:20:16 +02:00
Michal Čihař
63a5fdaa21
Add rel="noopener noreferrer" to all target="_blank" links
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:59:38 +02:00
Michal Čihař
a416cbe6c7
Use whitelist rather than blacklist for URL filtering
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:36:33 +02:00
Michal Čihař
b04150e30e
Do not allow javascript: links in transformation
...
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 13:26:03 +02:00
Michal Čihař
288efea5b4
Simplify and cleanup transformation plugins
...
Remove PMA_transformation_global_html_replace which makes the code only
more confusing.
Also add escaping to browse transformations.
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-17 16:19:31 +02:00
Dieter Adriaenssens
e0c8704f72
[security] Fix stored XSS in link transformation plugin, see PMASA-2013-13
2013-07-28 02:26:26 +02:00
Michal Čihař
54b2540d87
Use ellipsis where appropriate
2013-01-10 13:33:29 +01:00
Madhura Jayaratne
c9f37be407
Add @subpackage tags
2012-10-28 18:27:38 +05:30
Michal Čihař
869d7c0e99
Use single quotes when we do not want to evaluate the string
2012-10-16 11:18:16 +02:00
Michal Čihař
b8be2a8cc9
Add missing require
2012-10-16 11:15:16 +02:00
Chanaka Indrajith
6971295e96
Renamed PMA_CommonFunctions::getInstance()-> with PMA_Util::
2012-09-16 14:41:47 +05:30
Alex Marin
34a0dace8a
oop: some coding style for plugins
2012-08-16 23:10:33 +03:00
Chanaka Indrajith
87bcfe6deb
Links for information_schema
2012-08-01 23:29:41 +05:30
Chanaka Indrajith
d47030c4c8
Generate some links inside mysql schema
2012-07-30 01:57:37 +05:30
Chanaka Indrajith
106265a7f8
Resolve conflicts
2012-06-30 11:30:39 +05:30
Alex Marin
6efd5422f7
oop: transformations phpcs errors
2012-06-20 20:45:41 +03:00
Alex Marin
02dbd14fc7
oop: integrate transformations - no errors, but not working.
2012-06-20 16:28:10 +03:00
Alex Marin
1ad049d823
oop: transformations - fix classes, add interface and use descriptions
2012-06-19 23:59:47 +03:00
Alex Marin
507be981fe
oop: transformations rename classes
2012-06-19 16:52:23 +03:00
Alex Marin
1e4b0cd0dd
oop: transformations backbone
2012-06-07 14:57:14 +03:00