Madhura Jayaratne
786328c50b
Sanitize filenames (in a unified manner) before using in Content-Disposition header
2011-08-24 22:44:38 +05:30
Marc Delisle
4e89311089
ChangeLog and 3.4.4 XSS fix
2011-08-24 12:38:50 -04:00
Marc Delisle
3b75f549f4
Merge branch 'MAINT_3_4_4' into QA_3_4
2011-08-24 12:29:30 -04:00
Marc Delisle
29b694c225
bug #3392920 [edit] BLOB emptied after editing another column
2011-08-19 16:16:51 -04:00
Michal Čihař
da6e51d007
Do not escape field here, it is used as index to vairous arrays
2011-08-19 12:08:07 +02:00
Michal Čihař
8cec4ac91c
Revert "Revert "More of missing escaping""
...
This reverts commit 414363d38d
2011-08-19 12:07:32 +02:00
Michal Čihař
414363d38d
Revert "More of missing escaping"
...
This reverts commit 599c9b5e1b
2011-08-19 12:06:04 +02:00
Michal Čihař
599c9b5e1b
More of missing escaping
2011-08-19 11:56:38 +02:00
Michal Čihař
e7d6cab2a2
Missing escaping
2011-08-19 11:54:34 +02:00
Herman van Rink
f00c57bdf3
Slightly far fetched XSS prevention
2011-08-19 11:01:45 +02:00
Michal Čihař
5146970826
Escape displayed user input
2011-08-17 09:57:29 +02:00
Michal Čihař
97439c45f0
This is already done
2011-08-17 09:50:42 +02:00
Michal Čihař
1d07105073
Update translations from master
2011-08-15 09:51:01 +02:00
Michal Čihař
f761845154
Merge remote-tracking branch 'origin/MAINT_3_4_3' into QA_3_4
2011-08-15 09:48:46 +02:00
Dieter Adriaenssens
f7d3a72af0
remove another mention of Excel export
2011-08-11 20:50:14 +02:00
Michal Čihař
440f1bd4ba
Update translations from master
2011-08-11 09:38:23 +02:00
Dieter Adriaenssens
556636457a
Remove library PHPExcel, due to license issues
...
Remove native Excel exportand import modules (xls and xlsx formats)
2011-08-10 20:53:51 +02:00
Marc Delisle
4e5c583dcf
Sanitize filenames before using in Content-Disposition header
2011-08-08 17:28:54 -04:00
Herman van Rink
c547703b10
Sanitize filenames before using in Content-Disposition header
2011-08-08 20:07:09 +02:00
Herman van Rink
b659fbeb12
remove extraneous ?
2011-08-08 17:51:25 +02:00
Madhura Jayaratne
da9d10a3ef
Typo
2011-08-08 10:21:54 +05:30
Madhura Jayaratne
7b13b6f864
Documentation about suhosin.get.max_value_length limitation
2011-08-07 18:08:25 +05:30
Marc Delisle
0f5f2d9601
XSS with IE <= 8.x (semicolon and attachment headers
2011-08-06 15:05:59 -04:00
Michal Čihař
20298630ed
Changelog entry
2011-08-05 13:55:38 +02:00
Michal Čihař
f9b77fd153
Add missing space (bug#3386434)
2011-08-05 13:51:05 +02:00
Michal Čihař
7b9e61dac1
Translations from master
2011-08-05 13:48:13 +02:00
Herman van Rink
39edf6e1fb
XSS fixes
2011-08-05 12:01:47 +02:00
Herman van Rink
3d8fddceb0
XSS fixes
2011-08-05 11:45:35 +02:00
Herman van Rink
2b0d12b2de
Make better use of PMA_generate_common_url to prevent XSS
2011-08-05 11:45:16 +02:00
Herman van Rink
ec848d825f
XSS fixes
2011-08-05 10:14:18 +02:00
Michal Čihař
ea99a180bf
Update from master
2011-08-04 13:30:09 +02:00
Madhura Jayaratne
68e21b05e4
Changelog entry for bug #3383711 . Some formatting
2011-08-04 00:04:16 +05:30
Sven Strickroth
7909da2ea0
quick fix for issue #3383711
...
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-08-03 23:48:42 +05:30
Michal Čihař
e466dec53b
Update from master
2011-08-02 16:18:21 +02:00
Rouslan Placella
c17add38ed
Fixed bug #3374802 - Comment on a column breaks inline editing
2011-08-02 16:15:39 +02:00
Madhura Jayaratne
11ad4fd992
bug #3313235 [interface] Error div misplaced
2011-07-29 06:38:07 +05:30
Rouslan Placella
402a832e93
Fixed bug #3375325 - Page list in navigation frame looks odd
2011-07-26 14:35:47 +01:00
Marc Delisle
09b30b8b6e
3.4.4-rc1
2011-07-25 10:15:14 -04:00
Marc Delisle
871aaa9b64
3.4.5-dev
2011-07-25 10:12:37 -04:00
Marc Delisle
cc99e04055
3.4.5 started
2011-07-25 10:08:10 -04:00
Marc Delisle
08ee54d4a4
bug #3358750 [core] With Suhosin, urls are too long in edit links
2011-07-24 08:08:38 -04:00
Marc Delisle
ff536da865
3.4.3.2 release
2011-07-23 08:32:25 -04:00
Marc Delisle
3534dda30a
Fix merge conflicts
2011-07-23 08:16:00 -04:00
Marc Delisle
bd63726ee3
3.4.3.2 release date
2011-07-23 08:12:06 -04:00
Michal Čihař
06bfdd7ca6
Add changelog entries
2011-07-22 15:53:19 +02:00
Marc Delisle
9a268729f0
ChangeLog entry for bug #3374347
2011-07-22 09:34:42 -04:00
Sven Strickroth
201ad07ea8
Do not add backquotes for normal displayed text
...
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-07-22 09:33:30 -04:00
Jørgen Thomsen
5f9c187010
Fix format parameters
2011-07-22 15:19:31 +02:00
Sven Strickroth
54398f8a12
Do not call PMA_showHint with bbcode=true in display_tbl.lib.php
...
This fixes an issue with an InnoDB-table on sql.php with "select * from tbl" showing that "total ~ N <sup>1</sup>" rows are displayed and with a JavaScript enabled browser the footnote gets hidden and it's impossible to find out what the <sup>1</sup> means.
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-07-22 15:16:13 +02:00
Michal Čihař
bea5556023
Update translations from master
2011-07-22 10:20:44 +02:00
