summaryrefslogtreecommitdiff
path: root/modules/gallery/tests/Xss_Security_Test.php
AgeCommit message (Expand)Author
2013-01-21Update copyright to 2013. Fixes #1953.Bharat Mediratta
2012-02-27Update copyright to 2012. #1822Bharat Mediratta
2011-01-21Update copyright to 2011.Bharat Mediratta
2010-03-03Update the copyright to 2010. It's only 3 months into the year :-)Bharat Mediratta
2010-01-19Extend Gallery_Unit_Test_Case instead of Unit_Test_Case.Bharat Mediratta
2009-09-23Correct indentationTim Almdal
2009-09-17- Add theme->movie_menu() to whitelisted methods.Andy Staudacher
2009-09-01Remove debugging codeAndy Staudacher
2009-09-01Fix bug in XSS scanner for <script> block @ position 0 of inline_htmlAndy Staudacher
2009-08-31Add XSS check for HTML attributesAndy Staudacher
2009-08-31Add XSS check to ensure that html::js_string() is not preceded by a quote.Andy Staudacher
2009-08-31Adding XSS test for href="javascript: and onclick="..."Andy Staudacher
2009-08-31Rename mark_safe() to mark_clean()Andy Staudacher
2009-08-30Check for href="<?= $foo ?>" (malicious "javascript:..." string)Andy Staudacher
2009-08-30Tabs to spaces cleanupAndy Staudacher
2009-08-30Rename clean_js to js_string and have it return a complete JS string (with de...Andy Staudacher
2009-08-30Add $theme-> methods to Xss whitelist for HTML safety.Andy Staudacher
2009-08-29Update all code to use helper method html::clean(), html::purify(), ... inste...Andy Staudacher
2009-08-29Adding html::clean(), ::purify(), etc.Andy Staudacher
2009-08-29Undo url helper changes - url methods no longer return a SafeString.Andy Staudacher
2009-08-29Fixing all detected XSS vectors in PHP->JS code.Andy Staudacher
2009-08-29Add more factory methods for convenience:Andy Staudacher
2009-08-29Have url::site() and other methods return a SafeString, just as t() and t2().Andy Staudacher
2009-08-29Adding SafeString which is going to replace p::clean() and p::purify().Andy Staudacher
2009-07-16Update Xss_Security_Test to know about p::purify() and checkpoint theBharat Mediratta
2009-06-05Remove source code copy artefactAndy Staudacher
2009-06-04Change "CLEAN" to an empty string to see if it's better visually.Bharat Mediratta
2009-05-31Update the clean/dirty format, check all ffiles instead of just one (which wa...Bharat Mediratta
2009-05-31First pass at an XSS security test, along with the "p" helper whichBharat Mediratta