summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2009-08-31Merge commit 'upstream/master'Andy Staudacher
2009-08-31Fix XSS vectors in HTML attributes (mostly t() calls)Andy Staudacher
2009-08-31Escape single quotes in the password so that we don't break our configBharat Mediratta
2009-08-31Fix typo in descriptionAndy Staudacher
2009-08-31Suppress errors to mysql_connect(). We had this before, but itBharat Mediratta
2009-08-31Add XSS check for HTML attributesAndy Staudacher
2009-08-31Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta
2009-08-31Stay on the same page when editing albums/movies/photos. Fixes ticketBharat Mediratta
2009-08-31Add 'organize album' to the context menu.Bharat Mediratta
2009-08-31Add XSS check to ensure that html::js_string() is not preceded by a quote.Andy Staudacher
2009-08-31XSS review fixes (mostly adding missing html::mark_clean()) calls.Andy Staudacher
2009-08-31Adding XSS test for href="javascript: and onclick="..."Andy Staudacher
2009-08-31Rename mark_safe() to mark_clean()Andy Staudacher
2009-08-31Merge commit 'upstream/master'Andy Staudacher
2009-08-30Fix double -> single quotes (::js_string returns a double-quotes delimited st...Andy Staudacher
2009-08-30Updating golden XSS-test data fileAndy Staudacher
2009-08-30(mostly harmless) XSS fix in server addAndy Staudacher
2009-08-30XSS fixes in admin_comments.html.phpAndy Staudacher
2009-08-30Check for href="<?= $foo ?>" (malicious "javascript:..." string)Andy Staudacher
2009-08-30Updating XSS golden fileAndy Staudacher
2009-08-30Merge commit 'upstream/master'Andy Staudacher
2009-08-30Tabs to spaces cleanupAndy Staudacher
2009-08-30Merge branch 'master' of git@github.com:/gallery/gallery3Bharat Mediratta
2009-08-30Finish this pass at the Admin Maintenance view. Re-introduce status icons, pu...Chad Kieffer
2009-08-30Oops, fix up the show argument that I "fixed" in the last change.Bharat Mediratta
2009-08-30Use $theme->item() instead of $item.Bharat Mediratta
2009-08-30Merge branch 'master' of git@github.com:/gallery/gallery3Bharat Mediratta
2009-08-30Move header and footer into page.html.php since they're not included in any o...Chad Kieffer
2009-08-30Added comments, formatted CSS, added status message styles.Chad Kieffer
2009-08-30Merge branch 'master' of git@github.com:gallery/gallery3Chad Kieffer
2009-08-30Apply hover effect to buttons in progress indicator dialog.Chad Kieffer
2009-08-30Remove jquery.dropshadow. It's only used in one place, not worth keeping.Chad Kieffer
2009-08-30Minor refactoring.Bharat Mediratta
2009-08-30Merge branch 'master' of git@github.com:/gallery/gallery3Bharat Mediratta
2009-08-30Add back mysql_fetch_object() call that I accidentally removed in myBharat Mediratta
2009-08-30Don't mark colors !important.Bharat Mediratta
2009-08-30Make comments consistent.Bharat Mediratta
2009-08-30Remove extra padding lineBharat Mediratta
2009-08-30Get rid of as much jitter as possible in the organize tree.Bharat Mediratta
2009-08-30Tighten up a class attr.Bharat Mediratta
2009-08-30Make the lasso more prominent and the colors consistent.Bharat Mediratta
2009-08-30Change the higlight/selection behavior so that we don't use opacity toBharat Mediratta
2009-08-30Simplify over-targetted CSS.Bharat Mediratta
2009-08-30Updating uses of html::js_string and SafeString::for_js (value now contains s...Andy Staudacher
2009-08-30Rename clean_js to js_string and have it return a complete JS string (with de...Andy Staudacher
2009-08-30Remove unnecessary cleverness in stripping off the hyphen for mysqlBharat Mediratta
2009-08-30Don't try to move an item into its own descendant hierarchy. Just leave it o...Bharat Mediratta
2009-08-30Use is_descendant() API inside move_to() for clarity.Bharat Mediratta
2009-08-30CSS rename: gMicroThumbXxx -> gOrganizeMicroThumbXxx to make it clearBharat Mediratta
2009-08-30Rename gAlbumText to gOrganizeAlbumText for consistency since this isBharat Mediratta