Commit Graph

23 Commits

Author SHA1 Message Date
Michal Čihař
04156efeb0 Ensure widht and height are integers
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-13 10:53:51 +02:00
Michal Čihař
31546255f3 Ensure widht and height are integers
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-13 10:51:53 +02:00
Michal Čihař
14fd275811 Use iframe sandbox for rendering HTML in transformation
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 14:13:14 +02:00
Michal Čihař
0a4cdc25f1 Use _blank target instead of invalid _new
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 11:20:16 +02:00
Michal Čihař
63a5fdaa21 Add rel="noopener noreferrer" to all target="_blank" links
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:59:38 +02:00
Michal Čihař
a416cbe6c7 Use whitelist rather than blacklist for URL filtering
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-07-12 10:36:33 +02:00
Michal Čihař
b04150e30e Do not allow javascript: links in transformation
Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-22 13:26:03 +02:00
Michal Čihař
288efea5b4 Simplify and cleanup transformation plugins
Remove PMA_transformation_global_html_replace which makes the code only
more confusing.

Also add escaping to browse transformations.

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-06-17 16:19:31 +02:00
Dieter Adriaenssens
e0c8704f72 [security] Fix stored XSS in link transformation plugin, see PMASA-2013-13 2013-07-28 02:26:26 +02:00
Michal Čihař
54b2540d87 Use ellipsis where appropriate 2013-01-10 13:33:29 +01:00
Madhura Jayaratne
c9f37be407 Add @subpackage tags 2012-10-28 18:27:38 +05:30
Michal Čihař
869d7c0e99 Use single quotes when we do not want to evaluate the string 2012-10-16 11:18:16 +02:00
Michal Čihař
b8be2a8cc9 Add missing require 2012-10-16 11:15:16 +02:00
Chanaka Indrajith
6971295e96 Renamed PMA_CommonFunctions::getInstance()-> with PMA_Util:: 2012-09-16 14:41:47 +05:30
Alex Marin
34a0dace8a oop: some coding style for plugins 2012-08-16 23:10:33 +03:00
Chanaka Indrajith
87bcfe6deb Links for information_schema 2012-08-01 23:29:41 +05:30
Chanaka Indrajith
d47030c4c8 Generate some links inside mysql schema 2012-07-30 01:57:37 +05:30
Chanaka Indrajith
106265a7f8 Resolve conflicts 2012-06-30 11:30:39 +05:30
Alex Marin
6efd5422f7 oop: transformations phpcs errors 2012-06-20 20:45:41 +03:00
Alex Marin
02dbd14fc7 oop: integrate transformations - no errors, but not working. 2012-06-20 16:28:10 +03:00
Alex Marin
1ad049d823 oop: transformations - fix classes, add interface and use descriptions 2012-06-19 23:59:47 +03:00
Alex Marin
507be981fe oop: transformations rename classes 2012-06-19 16:52:23 +03:00
Alex Marin
1e4b0cd0dd oop: transformations backbone 2012-06-07 14:57:14 +03:00