index
:
gallery3.git
master
A clone of the Gallery3 code for testing and development.
root
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
modules
/
gallery
/
tests
/
Xss_Security_Test.php
Age
Commit message (
Expand
)
Author
2013-01-21
Update copyright to 2013. Fixes #1953.
Bharat Mediratta
2012-02-27
Update copyright to 2012. #1822
Bharat Mediratta
2011-01-21
Update copyright to 2011.
Bharat Mediratta
2010-03-03
Update the copyright to 2010. It's only 3 months into the year :-)
Bharat Mediratta
2010-01-19
Extend Gallery_Unit_Test_Case instead of Unit_Test_Case.
Bharat Mediratta
2009-09-23
Correct indentation
Tim Almdal
2009-09-17
- Add theme->movie_menu() to whitelisted methods.
Andy Staudacher
2009-09-01
Remove debugging code
Andy Staudacher
2009-09-01
Fix bug in XSS scanner for <script> block @ position 0 of inline_html
Andy Staudacher
2009-08-31
Add XSS check for HTML attributes
Andy Staudacher
2009-08-31
Add XSS check to ensure that html::js_string() is not preceded by a quote.
Andy Staudacher
2009-08-31
Adding XSS test for href="javascript: and onclick="..."
Andy Staudacher
2009-08-31
Rename mark_safe() to mark_clean()
Andy Staudacher
2009-08-30
Check for href="<?= $foo ?>" (malicious "javascript:..." string)
Andy Staudacher
2009-08-30
Tabs to spaces cleanup
Andy Staudacher
2009-08-30
Rename clean_js to js_string and have it return a complete JS string (with de...
Andy Staudacher
2009-08-30
Add $theme-> methods to Xss whitelist for HTML safety.
Andy Staudacher
2009-08-29
Update all code to use helper method html::clean(), html::purify(), ... inste...
Andy Staudacher
2009-08-29
Adding html::clean(), ::purify(), etc.
Andy Staudacher
2009-08-29
Undo url helper changes - url methods no longer return a SafeString.
Andy Staudacher
2009-08-29
Fixing all detected XSS vectors in PHP->JS code.
Andy Staudacher
2009-08-29
Add more factory methods for convenience:
Andy Staudacher
2009-08-29
Have url::site() and other methods return a SafeString, just as t() and t2().
Andy Staudacher
2009-08-29
Adding SafeString which is going to replace p::clean() and p::purify().
Andy Staudacher
2009-07-16
Update Xss_Security_Test to know about p::purify() and checkpoint the
Bharat Mediratta
2009-06-05
Remove source code copy artefact
Andy Staudacher
2009-06-04
Change "CLEAN" to an empty string to see if it's better visually.
Bharat Mediratta
2009-05-31
Update the clean/dirty format, check all ffiles instead of just one (which wa...
Bharat Mediratta
2009-05-31
First pass at an XSS security test, along with the "p" helper which
Bharat Mediratta