summaryrefslogtreecommitdiff
path: root/modules
AgeCommit message (Expand)Author
2009-09-01Update XSS scanner golden fileAndy Staudacher
2009-09-01XSS / style fixes for newly detected issues (after fixing XSS scanner)Andy Staudacher
2009-09-01XSS escape in form helper and forge where missing.Andy Staudacher
2009-09-01Fix XSS in tags JSAndy Staudacher
2009-09-01Remove debugging codeAndy Staudacher
2009-09-01Fix bug in XSS scanner for <script> block @ position 0 of inline_htmlAndy Staudacher
2009-08-31Update XSS test golden fileAndy Staudacher
2009-08-31Merge commit 'upstream/master'Andy Staudacher
2009-08-31Fix XSS vectors in HTML attributes (mostly t() calls)Andy Staudacher
2009-08-31Fix typo in descriptionAndy Staudacher
2009-08-31Add XSS check for HTML attributesAndy Staudacher
2009-08-31Merge branch 'master' of git@github.com:gallery/gallery3Bharat Mediratta
2009-08-31Stay on the same page when editing albums/movies/photos. Fixes ticketBharat Mediratta
2009-08-31Add 'organize album' to the context menu.Bharat Mediratta
2009-08-31Add XSS check to ensure that html::js_string() is not preceded by a quote.Andy Staudacher
2009-08-31XSS review fixes (mostly adding missing html::mark_clean()) calls.Andy Staudacher
2009-08-31Adding XSS test for href="javascript: and onclick="..."Andy Staudacher
2009-08-31Rename mark_safe() to mark_clean()Andy Staudacher
2009-08-31Merge commit 'upstream/master'Andy Staudacher
2009-08-30Fix double -> single quotes (::js_string returns a double-quotes delimited st...Andy Staudacher
2009-08-30Updating golden XSS-test data fileAndy Staudacher
2009-08-30(mostly harmless) XSS fix in server addAndy Staudacher
2009-08-30XSS fixes in admin_comments.html.phpAndy Staudacher
2009-08-30Check for href="<?= $foo ?>" (malicious "javascript:..." string)Andy Staudacher
2009-08-30Updating XSS golden fileAndy Staudacher
2009-08-30Merge commit 'upstream/master'Andy Staudacher
2009-08-30Tabs to spaces cleanupAndy Staudacher
2009-08-30Finish this pass at the Admin Maintenance view. Re-introduce status icons, pu...Chad Kieffer
2009-08-30Merge branch 'master' of git@github.com:/gallery/gallery3Bharat Mediratta
2009-08-30Merge branch 'master' of git@github.com:gallery/gallery3Chad Kieffer
2009-08-30Apply hover effect to buttons in progress indicator dialog.Chad Kieffer
2009-08-30Minor refactoring.Bharat Mediratta
2009-08-30Merge branch 'master' of git@github.com:/gallery/gallery3Bharat Mediratta
2009-08-30Don't mark colors !important.Bharat Mediratta
2009-08-30Make comments consistent.Bharat Mediratta
2009-08-30Remove extra padding lineBharat Mediratta
2009-08-30Get rid of as much jitter as possible in the organize tree.Bharat Mediratta
2009-08-30Tighten up a class attr.Bharat Mediratta
2009-08-30Make the lasso more prominent and the colors consistent.Bharat Mediratta
2009-08-30Change the higlight/selection behavior so that we don't use opacity toBharat Mediratta
2009-08-30Simplify over-targetted CSS.Bharat Mediratta
2009-08-30Updating uses of html::js_string and SafeString::for_js (value now contains s...Andy Staudacher
2009-08-30Rename clean_js to js_string and have it return a complete JS string (with de...Andy Staudacher
2009-08-30Don't try to move an item into its own descendant hierarchy. Just leave it o...Bharat Mediratta
2009-08-30Use is_descendant() API inside move_to() for clarity.Bharat Mediratta
2009-08-30CSS rename: gMicroThumbXxx -> gOrganizeMicroThumbXxx to make it clearBharat Mediratta
2009-08-30Rename gAlbumText to gOrganizeAlbumText for consistency since this isBharat Mediratta
2009-08-30remove unused #gOrganizeDialogBharat Mediratta
2009-08-30Manage the selection so we don't automatically select an albumBharat Mediratta
2009-08-30Precalculate the organize tree based on the selected album and renderBharat Mediratta