Simon McVittie ebe140201e comments: sanitize the body of each comment before posting it ... This should ensure that users can't "break out" from the enclosing <div>, making it impossible to forge comments (assuming htmlscrubber is enabled, and so is either htmlbalance or htmltidy).		2008-12-11 21:14:03 +00:00
..
Plugin	comments: sanitize the body of each comment before posting it	2008-12-11 21:14:03 +00:00
Setup	Use the pure perl Data::Dumper when generating setup files to ensure that utf-8 characters are written out as such, and not as the encoded perl strings the C Data::Dumper produces.	2008-10-19 21:23:48 -04:00
CGI.pm	Fix issue with utf-8 in wikiname breaking session cookies, by entity-encoding the wikiname in the session cookie.	2008-10-19 21:07:12 -04:00
Receive.pm	move untrusted committer test into the wrapper	2008-10-26 14:03:18 -04:00
Render.pm	set ctime in --render mode if not known	2008-10-30 14:50:33 -04:00
Setup.pm	don't fail if %config is not set	2008-09-01 11:26:03 -04:00
UserInfo.pm	banned_users move to setup file, stage 1	2008-08-01 17:39:17 -04:00
Wrapper.pm	make unlockwiki drop the cgilock	2008-11-11 20:48:02 -05:00