Marc Delisle
0f5f2d9601
XSS with IE <= 8.x (semicolon and attachment headers
2011-08-06 15:05:59 -04:00
Michal Čihař
20298630ed
Changelog entry
2011-08-05 13:55:38 +02:00
Michal Čihař
f9b77fd153
Add missing space (bug#3386434)
2011-08-05 13:51:05 +02:00
Michal Čihař
7b9e61dac1
Translations from master
2011-08-05 13:48:13 +02:00
Herman van Rink
39edf6e1fb
XSS fixes
2011-08-05 12:01:47 +02:00
Herman van Rink
3d8fddceb0
XSS fixes
2011-08-05 11:45:35 +02:00
Herman van Rink
2b0d12b2de
Make better use of PMA_generate_common_url to prevent XSS
2011-08-05 11:45:16 +02:00
Herman van Rink
ec848d825f
XSS fixes
2011-08-05 10:14:18 +02:00
Michal Čihař
ea99a180bf
Update from master
2011-08-04 13:30:09 +02:00
Madhura Jayaratne
68e21b05e4
Changelog entry for bug #3383711 . Some formatting
2011-08-04 00:04:16 +05:30
Sven Strickroth
7909da2ea0
quick fix for issue #3383711
...
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-08-03 23:48:42 +05:30
Michal Čihař
e466dec53b
Update from master
2011-08-02 16:18:21 +02:00
Rouslan Placella
c17add38ed
Fixed bug #3374802 - Comment on a column breaks inline editing
2011-08-02 16:15:39 +02:00
Madhura Jayaratne
11ad4fd992
bug #3313235 [interface] Error div misplaced
2011-07-29 06:38:07 +05:30
Rouslan Placella
402a832e93
Fixed bug #3375325 - Page list in navigation frame looks odd
2011-07-26 14:35:47 +01:00
Marc Delisle
09b30b8b6e
3.4.4-rc1
2011-07-25 10:15:14 -04:00
Marc Delisle
871aaa9b64
3.4.5-dev
2011-07-25 10:12:37 -04:00
Marc Delisle
cc99e04055
3.4.5 started
2011-07-25 10:08:10 -04:00
Marc Delisle
08ee54d4a4
bug #3358750 [core] With Suhosin, urls are too long in edit links
2011-07-24 08:08:38 -04:00
Marc Delisle
ff536da865
3.4.3.2 release
2011-07-23 08:32:25 -04:00
Marc Delisle
3534dda30a
Fix merge conflicts
2011-07-23 08:16:00 -04:00
Marc Delisle
bd63726ee3
3.4.3.2 release date
2011-07-23 08:12:06 -04:00
Michal Čihař
06bfdd7ca6
Add changelog entries
2011-07-22 15:53:19 +02:00
Marc Delisle
9a268729f0
ChangeLog entry for bug #3374347
2011-07-22 09:34:42 -04:00
Sven Strickroth
201ad07ea8
Do not add backquotes for normal displayed text
...
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-07-22 09:33:30 -04:00
Jørgen Thomsen
5f9c187010
Fix format parameters
2011-07-22 15:19:31 +02:00
Sven Strickroth
54398f8a12
Do not call PMA_showHint with bbcode=true in display_tbl.lib.php
...
This fixes an issue with an InnoDB-table on sql.php with "select * from tbl" showing that "total ~ N <sup>1</sup>" rows are displayed and with a JavaScript enabled browser the footnote gets hidden and it's impossible to find out what the <sup>1</sup> means.
Signed-off-by: Sven Strickroth <email@cs-ware.de >
2011-07-22 15:16:13 +02:00
Michal Čihař
bea5556023
Update translations from master
2011-07-22 10:20:44 +02:00
Marc Delisle
36c0339eb0
Remove misleading comment on the "Rename database" interface
2011-07-21 10:55:10 -04:00
Madhura Jayaratne
58b48a3d45
bug #3367986 [navi] Drop field -> lost active table
2011-07-21 08:55:57 +05:30
Rouslan Placella
9eba5726bd
Fixed bug #3363221 - Missing Server Parameter on inline sql query
2011-07-15 19:31:29 +01:00
Rouslan Placella
3ec3c7ee17
Fixed bug #3367993 - Missing "Generate Password" button
2011-07-15 16:32:18 +01:00
Rouslan Placella
40d7c3b8ba
tabs -> spaces
2011-07-15 16:02:37 +01:00
Marc Delisle
b185ca88f7
remove version number in /setup
2011-07-15 08:53:20 -04:00
Piotr Przybylski
2cc22c8aba
Fix CodeGen export
2011-07-14 23:48:17 +02:00
Piotr Przybylski
70083ad583
Fix XML export so it actually can export table structure
...
More escaping fixes
2011-07-14 23:43:56 +02:00
Piotr Przybylski
65d962d397
Better escaping in XML export
...
Note: it's still incorrect
2011-07-14 23:40:58 +02:00
Piotr Przybylski
6d0f28b425
Improve readability of XML export code
2011-07-14 23:38:09 +02:00
Marc Delisle
09c0f7ae55
Fix broken characters
2011-07-11 21:24:06 -04:00
Michal Čihař
571cdc6ff4
Pass token along with swekey auth requests
2011-07-11 14:50:44 +02:00
Michal Čihař
ed88c4a7b6
Fix error when gettext is not yet loaded and we want to warn.
...
This happens when PHP is compiled without session support, which is
checked before gettext is loaded.
2011-07-10 22:46:46 +02:00
Madhura Jayaratne
58d25ddcb8
Typo
2011-07-10 17:58:35 +05:30
Madhura Jayaratne
a546479680
bug #3357837 [interface] TABbing through a NULL field in the inline mode resets NULL
2011-07-10 17:55:56 +05:30
Herman van Rink
e7bb42c002
[security] Fixed possible session manipulation in swekey authentication, see PMASA-2011-12
2011-07-09 23:10:23 +02:00
Herman van Rink
3ae58f0cd6
[security] Fixed local file inclusion vulnerability and code execution, see PMASA-2011-11
2011-07-08 21:43:38 +02:00
Herman van Rink
3caa6cbb7e
Merge remote-tracking branch 'security/MAINT_3_4_3-security' into MAINT_3_4_3-security
2011-07-08 10:38:55 +02:00
Marc Delisle
f63e1bb42a
Local file inclusion vulnerability
2011-07-07 14:50:37 -04:00
Marc Delisle
951fb4dd79
ChangeLog for PMASA-2011-9
2011-07-07 14:46:33 -04:00
Herman van Rink
4bd27166c3
Another case of XSS
2011-07-07 14:43:45 -04:00
Marc Delisle
a0823be05a
XSS on table Print view
2011-07-07 14:39:09 -04:00