Commit Graph

41 Commits

Author SHA1 Message Date
Michal Čihař
7553544cd1 Escape version before printing 2012-03-14 17:16:55 +01:00
Herman van Rink
f00c57bdf3 Slightly far fetched XSS prevention 2011-08-19 11:01:45 +02:00
Herman van Rink
c547703b10 Sanitize filenames before using in Content-Disposition header 2011-08-08 20:07:09 +02:00
Herman van Rink
b659fbeb12 remove extraneous ? 2011-08-08 17:51:25 +02:00
Marc Delisle
0f5f2d9601 XSS with IE <= 8.x (semicolon and attachment headers 2011-08-06 15:05:59 -04:00
Herman van Rink
39edf6e1fb XSS fixes 2011-08-05 12:01:47 +02:00
Herman van Rink
3d8fddceb0 XSS fixes 2011-08-05 11:45:35 +02:00
Herman van Rink
2b0d12b2de Make better use of PMA_generate_common_url to prevent XSS 2011-08-05 11:45:16 +02:00
Herman van Rink
ec848d825f XSS fixes 2011-08-05 10:14:18 +02:00
Herman van Rink
7e10c132a3 XSS in Tracking page, more 2011-05-20 12:49:49 -04:00
Herman van Rink
d3ccf798fd XSS in Tracking page 2011-05-20 12:41:33 -04:00
Michal Čihař
7899b0f199 Avoid comparing translated strings and simplify the code. 2011-03-18 14:49:38 +01:00
Madhura Jayaratne
326f13827b Do not highlight rows of these tables 2011-03-15 20:35:53 +05:30
Michal Čihař
d17fba309c Fix permissions.
Most files were made executable somewhere in ninadsp tree, reverting
this.
2010-08-30 09:53:37 +02:00
ninadsp
a2f78a6d38 Resolve merge conflicts for upstream merge 2010-07-29 19:17:25 +05:30
Michal Čihař
3910ce6121 Remove explicit inclusion of Table.class.php as it is included in common.inc anyway. 2010-07-26 16:35:52 +02:00
Michal Čihař
d291827444 No need to require_once footer
It is the last thing executed anyway (ends with exit).
2010-07-26 16:20:24 +02:00
Michal Čihař
ee767e2d3d No need to explicitely include relation.lib its anyway included in common.inc 2010-07-26 16:17:59 +02:00
Marc Delisle
084c0dbcf5 functions.js included automatically 2010-07-24 08:11:48 -04:00
ninadsp
e646a2760c Fixed conflict due to upstream merge 2010-07-23 21:59:15 +05:30
Michal Čihař
318dc4b650 Drop @version tag from docblocks. 2010-07-20 13:59:17 +02:00
ninadsp
160f4314eb Merge remote branch 'origin/master' 2010-06-03 22:34:52 +05:30
Marc Delisle
caa98445d8 conform to relational terminology regarding columns and rows 2010-05-31 14:33:21 -04:00
ninadsp
38ac78e3ba merging changes from origin 2010-05-24 18:32:42 +05:30
Michal Čihař
f33f82386e Use correct message and escape for js. 2010-05-24 11:23:29 +02:00
ninadsp
bed1948d04 testing git setup - no major change made in code yet
only added a few comments
2010-05-23 01:22:01 +05:30
Michal Čihař
08edb1f2a6 Another fixup of wrong conversion. 2010-05-05 11:17:28 +02:00
Michal Čihař
962d9d6c0f Fix wrong conversion to inline gettext. 2010-05-05 11:15:13 +02:00
Marc Delisle
f55823f47f strings to gettext, first batch 2010-05-03 12:57:46 -04:00
Marc Delisle
ba0ca1851a Merge branch 'QA_3_3' 2010-04-26 16:38:46 -04:00
Marc Delisle
06c8fa0abb Tracking report should obey MaxCharactersInDisplayedSQL 2010-04-26 16:38:20 -04:00
Marc Delisle
819324ede6 remove author names, as discussed at the 2010 developer meeting and according to the book Producing Open Source Software 2010-03-06 18:04:17 +00:00
Marc Delisle
526dce65cb 3.3 2009-12-31 13:11:19 +00:00
Marc Delisle
f3833884e4 3.3 2009-12-31 13:09:18 +00:00
Marc Delisle
46826be014 permit to see tracking info even for deleted tables; code cleanup 2009-12-27 21:52:21 +00:00
Marc Delisle
f663fe465d code cleanup; missing messages; XHTML compliancy (except one general pretty-printing problem) 2009-12-06 14:09:14 +00:00
Marc Delisle
e84dfe5c36 code cleanup; XHTML compliancy 2009-11-29 13:54:04 +00:00
Marc Delisle
07b13c5f5a "deactive" is not an English word 2009-09-07 13:03:33 +00:00
Marc Delisle
f7baa83321 "Go" is more consistent with the interface 2009-09-07 12:32:46 +00:00
Marc Delisle
2751a8c000 unneeded messages 2009-09-07 12:24:19 +00:00
Marc Delisle
15441ded5d do not try to display a tab that was not built 2009-08-22 11:22:50 +00:00