Herman van Rink
|
4bd27166c3
|
Another case of XSS
|
2011-07-07 14:43:45 -04:00 |
|
Marc Delisle
|
a0823be05a
|
XSS on table Print view
|
2011-07-07 14:39:09 -04:00 |
|
Marc Delisle
|
e214683f9f
|
3.4.3.1 release
|
2011-07-02 20:49:01 -04:00 |
|
Herman van Rink
|
b434320eff
|
Fixed filtering of a file path, which allowed for directory traversal, see PMASA-2011-8
|
2011-06-30 20:26:08 +02:00 |
|
Herman van Rink
|
69fb0f8e7d
|
Fixed regexp quoting issue in Synchronize code, see PMASA-2011-7
|
2011-06-30 13:26:29 +02:00 |
|
Herman van Rink
|
0fbedaf5fd
|
Fixed possible code injection incase session variables are compromised, see PMASA-2011-6
|
2011-06-30 13:21:31 +02:00 |
|
Herman van Rink
|
7ebd958b2b
|
Fixed possible session manipulation in swekey authentication, see PMASA-2011-5
|
2011-06-30 12:30:58 +02:00 |
|
Michal Čihař
|
9fc6e35cfd
|
Avoid double escaping
|
2011-06-27 10:20:29 -04:00 |
|
Marc Delisle
|
d3b67a35a0
|
Merge branch 'MAINT_3_4_3' of ssh://phpmyadmin.git.sourceforge.net/gitroot/phpmyadmin/phpmyadmin into MAINT_3_4_3
|
2011-06-27 08:23:05 -04:00 |
|
Marc Delisle
|
e21d6073e4
|
3.4.3 release
|
2011-06-27 08:20:21 -04:00 |
|
Michal Čihař
|
79d924add8
|
Really show full field definition, not just "full text" text
|
2011-06-27 13:55:54 +02:00 |
|
Michal Čihař
|
4bec3b3bee
|
Lower threshold for translations
It looks like incomplete translations do attract new translators, so
let's include few more.
|
2011-06-27 13:40:15 +02:00 |
|
Michal Čihař
|
2c6666bf03
|
Update translations from master
|
2011-06-27 13:39:17 +02:00 |
|
Michal Čihař
|
52269e0e56
|
Update translations from master
|
2011-06-24 12:59:27 +02:00 |
|
Michal Čihař
|
dc6c1e8b5c
|
I think htmlspecialchars should be used here
|
2011-06-21 12:08:48 +02:00 |
|
Michal Čihař
|
cb043f4365
|
Use standard infrastructure for generating links, this also prevents XSS
|
2011-06-21 12:04:52 +02:00 |
|
Marc Delisle
|
a8caf74fda
|
3.4.3-rc1
|
2011-06-20 12:18:57 -04:00 |
|
Marc Delisle
|
6944ee44ce
|
ChangeLog entry for "Minor XSS"
|
2011-06-20 10:15:08 -04:00 |
|
Marc Delisle
|
3bd3f60b28
|
Merge commit '7602e1593c1565b4dbd90df13fd162cee6546798' into QA_3_4
|
2011-06-20 10:12:52 -04:00 |
|
Michal Čihař
|
6616a6b34c
|
Changes from master
|
2011-06-20 11:28:05 +02:00 |
|
Rouslan Placella
|
ada8916b98
|
bug #3319466 [edit] Inline query edit does not escape special characters
|
2011-06-17 21:10:00 +01:00 |
|
Michal Čihař
|
b45de543c0
|
Fix syntax error
|
2011-06-17 11:50:28 +02:00 |
|
Michal Čihař
|
bbe388010b
|
Update based on master
|
2011-06-17 11:04:15 +02:00 |
|
Madhura Jayaratne
|
9d2269d297
|
bug #3317293 [edit] Inline edit places HTML line breaks in edit area
|
2011-06-16 21:05:54 +05:30 |
|
Jacob Middag
|
99bae4acb9
|
patch #3317206 [privileges] Generate password option missing on new accounts
|
2011-06-16 07:57:09 -04:00 |
|
Madhura Jayaratne
|
396e4e9979
|
bug #3315741 [display] Inline query edit broken
|
2011-06-15 20:06:26 +05:30 |
|
Michal Čihař
|
8cebaca19b
|
bug #3315720 [search] Fix search in non unicode tables
We need to convert field to unicode because the connection is in utf-8
and we might give utf-8 input as well.
|
2011-06-14 09:15:07 +02:00 |
|
Michal Čihař
|
c4c8fcb2b5
|
Merge changes from master
|
2011-06-14 08:57:20 +02:00 |
|
Michal Čihař
|
fa6640559b
|
Update from master
|
2011-06-13 14:25:27 +02:00 |
|
Michal Čihař
|
7ff4cb07cc
|
Update from master
|
2011-06-13 08:52:17 +02:00 |
|
Herman van Rink
|
7602e1593c
|
Minor xss reported by Aung Khant
|
2011-06-12 21:41:54 +02:00 |
|
Herman van Rink
|
e49ab1bfe1
|
Minor xss reported by Aung Khant
|
2011-06-10 21:43:16 +02:00 |
|
Herman van Rink
|
bbccc36817
|
Minor xss reported by Aung Khant
|
2011-06-10 21:38:43 +02:00 |
|
Marc Delisle
|
20118f89cf
|
Changelog entry for patch #3313326
|
2011-06-10 12:54:34 -04:00 |
|
Rouslan Placella
|
c422694746
|
Patch #3313326 Some tooltips do not disappear
|
2011-06-10 12:53:33 -04:00 |
|
Marc Delisle
|
2d56821c0f
|
Improved fix for bug #3313210
|
2011-06-07 11:43:30 -04:00 |
|
Marc Delisle
|
82ac1e8028
|
bug #3313210 [interface] Columns class sometimes changed for nothing
|
2011-06-07 11:06:38 -04:00 |
|
Michal Čihař
|
7afbe60f2b
|
Merge remote-tracking branch 'origin/MAINT_3_4_2' into QA_3_4
|
2011-06-07 14:35:10 +02:00 |
|
Marc Delisle
|
42fd105f24
|
3.4.2 release
|
2011-06-07 08:11:40 -04:00 |
|
Marc Delisle
|
8b48c1998d
|
3.4.2 release
|
2011-06-07 08:11:12 -04:00 |
|
Michal Čihař
|
54cf26644a
|
Merge branch 'MAINT_3_4_2' into QA_3_4
|
2011-06-07 13:25:01 +02:00 |
|
Michal Čihař
|
4f2251417c
|
Update from master
|
2011-06-07 13:24:52 +02:00 |
|
Michal Čihař
|
2a22d7dae7
|
Update from master
|
2011-06-06 11:23:18 +02:00 |
|
Jo Michael
|
7996a36575
|
patch #3311539 Inline Edit does not escape backslash
|
2011-06-05 06:29:46 -04:00 |
|
Marc Delisle
|
86d3b7e58c
|
bug #3307616 [edit] Inline edit updates multiple duplicate rows
|
2011-06-05 06:13:11 -04:00 |
|
Marc Delisle
|
60089624dd
|
bug #3304544 [parser] master is not a reserved word
|
2011-06-04 06:39:09 -04:00 |
|
Yuichiro
|
2bdfe06982
|
patch #3304473 [setup] Redefine a lable that was wrong
|
2011-06-04 05:59:34 -04:00 |
|
Madhura Jayaratne
|
612f8f3d67
|
Partial fix for bug #3291306 - Inline edit does not honor bit fields. Works with mysqli extension.
|
2011-06-04 00:02:11 +05:30 |
|
Marc Delisle
|
ab1a2394c3
|
bug #3311170 [sync] Missing helper icons in Synchronize
|
2011-06-03 13:00:56 -04:00 |
|
Michal Čihař
|
15ef12542e
|
Merge branch 'MAINT_3_4_2' into QA_3_4
|
2011-06-03 15:14:31 +02:00 |
|