Joey Hess dcfeaaad5b comments: Fix XSS security hole due to missing validation of page name. ... Values have to be checked against wiki_file_regexp, not just file_pruned. Audited the rest of the code base for similar problems, found none.		2011-01-22 10:15:33 -04:00
..
Plugin	comments: Fix XSS security hole due to missing validation of page name.	2011-01-22 10:15:33 -04:00
Setup	add warning about incomplete tla support	2010-03-29 13:17:32 -04:00
CGI.pm	fix urlto(undef)	2011-01-05 18:08:03 -04:00
Receive.pm	Fix typo that broke anonymous git push.	2010-10-23 15:25:29 -04:00
Render.pm	Fix escaping of filenames in historyurl. (Thanks, aj)	2010-11-16 15:12:52 -04:00
Setup.pm	remove debug code	2010-07-26 17:53:06 -04:00
UserInfo.pm	…
Wrapper.pm	Export three cgi env vars needed for CGI->url to work.	2011-01-05 16:08:21 -04:00