index
:
gallery3.git
master
A clone of the Gallery3 code for testing and development.
root
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
modules
/
gallery
Age
Commit message (
Expand
)
Author
2009-09-01
Fix bug #522 - Handle "save settings" correctly in the "share translations" f...
Andy Staudacher
2009-09-01
Merge commit 'upstream/master'
Andy Staudacher
2009-09-01
Update XSS scanner golden file
Andy Staudacher
2009-09-01
XSS / style fixes for newly detected issues (after fixing XSS scanner)
Andy Staudacher
2009-09-01
Remove debugging code
Andy Staudacher
2009-09-01
Fix bug in XSS scanner for <script> block @ position 0 of inline_html
Andy Staudacher
2009-08-31
Set CSS cursor to hand for jQuery UI ui-state-hover elements. Fixes all but p...
Chad Kieffer
2009-08-31
Merge branch 'master' of git@github.com:gallery/gallery3
Chad Kieffer
2009-08-31
Don't include Make this the album's cover in context menu's for albums. #705
Chad Kieffer
2009-08-31
Update XSS test golden file
Andy Staudacher
2009-08-31
Merge branch 'master' of git@github.com:gallery/gallery3
Chad Kieffer
2009-08-31
Merge commit 'upstream/master'
Andy Staudacher
2009-08-31
Fix XSS vectors in HTML attributes (mostly t() calls)
Andy Staudacher
2009-08-31
Add icons to context menu for albums. I'm open to other options, if folks thi...
Chad Kieffer
2009-08-31
Add XSS check for HTML attributes
Andy Staudacher
2009-08-31
Merge branch 'master' of git@github.com:gallery/gallery3
Bharat Mediratta
2009-08-31
Stay on the same page when editing albums/movies/photos. Fixes ticket
Bharat Mediratta
2009-08-31
Add XSS check to ensure that html::js_string() is not preceded by a quote.
Andy Staudacher
2009-08-31
XSS review fixes (mostly adding missing html::mark_clean()) calls.
Andy Staudacher
2009-08-31
Adding XSS test for href="javascript: and onclick="..."
Andy Staudacher
2009-08-31
Rename mark_safe() to mark_clean()
Andy Staudacher
2009-08-31
Merge commit 'upstream/master'
Andy Staudacher
2009-08-30
Updating golden XSS-test data file
Andy Staudacher
2009-08-30
Check for href="<?= $foo ?>" (malicious "javascript:..." string)
Andy Staudacher
2009-08-30
Updating XSS golden file
Andy Staudacher
2009-08-30
Merge commit 'upstream/master'
Andy Staudacher
2009-08-30
Tabs to spaces cleanup
Andy Staudacher
2009-08-30
Finish this pass at the Admin Maintenance view. Re-introduce status icons, pu...
Chad Kieffer
2009-08-30
Merge branch 'master' of git@github.com:gallery/gallery3
Chad Kieffer
2009-08-30
Apply hover effect to buttons in progress indicator dialog.
Chad Kieffer
2009-08-30
Updating uses of html::js_string and SafeString::for_js (value now contains s...
Andy Staudacher
2009-08-30
Rename clean_js to js_string and have it return a complete JS string (with de...
Andy Staudacher
2009-08-30
Use is_descendant() API inside move_to() for clarity.
Bharat Mediratta
2009-08-30
Improve no_tabs test to print out a complete list of files + line numbers + l...
Andy Staudacher
2009-08-30
Add $theme-> methods to Xss whitelist for HTML safety.
Andy Staudacher
2009-08-30
Change all instances of SafeString::of_safe_html() to html::mark_safe() in vi...
Andy Staudacher
2009-08-30
Fixing typo
Andy Staudacher
2009-08-29
Minor cleanup
Andy Staudacher
2009-08-29
Update all code to use helper method html::clean(), html::purify(), ... inste...
Andy Staudacher
2009-08-29
Adding html::clean(), ::purify(), etc.
Andy Staudacher
2009-08-29
Remove try/catch in resize() since that will swallow any exceptions
Bharat Mediratta
2009-08-29
Undo url helper changes - url methods no longer return a SafeString.
Andy Staudacher
2009-08-29
you can close the l10n client directly from its interface now, without going ...
jhilden
2009-08-29
XSS fixes
Andy Staudacher
2009-08-29
Fix for ticket #628:
Tim Almdal
2009-08-29
Fix invalida syntax on trying to parse the progress bar percentage
Tim Almdal
2009-08-29
L10n fixes for the admin_languages page, and JS/XSS cleanup of the organize v...
Andy Staudacher
2009-08-29
Fix link in l10n UI (for SafeString changes)
Andy Staudacher
2009-08-29
Merge commit 'upstream/master'
Andy Staudacher
2009-08-29
Fixing all detected XSS vectors in PHP->JS code.
Andy Staudacher
[next]