dépôts / lhc / web / wiklou.git / search
? search:
summary | shortlog | log | commit | commitdiff | tree
first ⋅ prev ⋅ next
SECURITY: Set maximal password length for DoS
2015-04-01 Tyler RomeoSECURITY: Set maximal password length for DoS
 commit | commitdiff | tree
2015-04-01 csteippSECURITY: Fix animate blacklist
 commit | commitdiff | tree
2015-04-01 csteippSECURITY: Don't allow embedded application/xml in SVG's
 commit | commitdiff | tree
2015-04-01 Tyler RomeoSECURITY: Make SVG @import checking case insensitive
 commit | commitdiff | tree
2014-11-19 csteippMake calling wfMangleFlashPolicy configurable
 commit | commitdiff | tree
2014-09-04 csteippAllow extensions to indicate a username doesn't exist
 commit | commitdiff | tree
2014-08-28 csteippLoad password information when expiring
 commit | commitdiff | tree
2014-06-24 csteippRelease notes for browser tests
 commit | commitdiff | tree
2014-06-09 csteippAdd HKDF as a fast, random number source
 commit | commitdiff | tree
2014-06-02 csteippAdd some SVG element namespaces
 commit | commitdiff | tree
2014-05-02 csteippMaintain remember me state on password change
 commit | commitdiff | tree
2014-05-01 csteippInitialize static input to null
 commit | commitdiff | tree
2014-04-28 csteippAllow adding Deleted log entries
 commit | commitdiff | tree
2014-03-18 csteippAllow login with passwords not meeting complexity requirements
 commit | commitdiff | tree
2014-03-03 csteippAdd Updater for Oracle
 commit | commitdiff | tree
2014-02-21 csteippAdd note about user_password_expires schema change
 commit | commitdiff | tree
2014-02-20 csteippPassword Expiration
 commit | commitdiff | tree
2014-01-29 Tim StarlingSECURITY: Sanitize shell command args
 commit | commitdiff | tree
2014-01-14 Brad JorschSECURITY: Fix RevDel log entry information leaks
 commit | commitdiff | tree
2014-01-14 csteippSECURITY: Return error on invalid XML for SVGs
 commit | commitdiff | tree
2014-01-14 csteippSECURITY: Disallow -o-link in styles
 commit | commitdiff | tree
2014-01-14 csteippSECURITY: Don't normalize U+FF3C to \
 commit | commitdiff | tree
2014-01-14 Aaron SchulzSECURITY: Added missing auth check in img_auth.php
 commit | commitdiff | tree
2013-11-14 csteippSECURITY: Don't cache when a call could autocreate
 commit | commitdiff | tree
2013-11-14 csteippSECURITY: Improve css javascript detection
 commit | commitdiff | tree
2013-10-07 csteippMove forceHTTPS check until after wgTitle is setup
 commit | commitdiff | tree
2013-09-30 csteippAdd Vary: X-Forwarded-Proto for https redirects
 commit | commitdiff | tree
2013-09-30 csteippRedirect to https for signup
 commit | commitdiff | tree
2013-09-25 csteippVary on forceHTTPS cookie
 commit | commitdiff | tree
2013-09-03 Tim StarlingSECURITY: Fix extension detection with 2 .'s
 commit | commitdiff | tree
2013-09-03 Brad JorschSECURITY: Prevent tokens in jsonp mode
 commit | commitdiff | tree
2013-09-03 csteippSECURITY: Prevent FPD on exceptions in load.php
 commit | commitdiff | tree
2013-08-31 csteippAlso redirect if prefixed https cookie is preset
 commit | commitdiff | tree
2013-08-29 csteippRemove prefix from forceHTTPS cookie
 commit | commitdiff | tree
2013-07-29 csteippAdd methods to get raw request in WebRequest
 commit | commitdiff | tree
2013-05-21 csteippSECURITY: Do checks on all upload types
 commit | commitdiff | tree
2013-05-10 csteippAdd value to add() call when locking
 commit | commitdiff | tree
2013-04-30 csteippSECURITY: Check SVG xml encoding against whitelist
 commit | commitdiff | tree
2013-04-15 csteippDisable external entities in Import
 commit | commitdiff | tree
2013-04-15 csteippDisable external entities in XMLReader
 commit | commitdiff | tree
2013-04-15 csteippSanitize $limitReport before outputting
 commit | commitdiff | tree
2013-03-29 SkizzerzApply IP blocks to X-Forwarded-For header
 commit | commitdiff | tree
2013-03-22 Aaron SchulzRevert "Misc follow-ups to I2fc3966e (a161c5e)"
 commit | commitdiff | tree
2013-03-04 umherirrenderAdd username for GENDER in LogFormatter only when visible
 commit | commitdiff | tree
2013-03-04 Alex Monk(bug 43518) API action=unblock should return the user...
commit | commitdiff | tree
2013-01-25 csteippBy default, keep users in HTTPS with wgSecureLogin
 commit | commitdiff | tree
2013-01-18 csteippAdd guard to Resources.php
 commit | commitdiff | tree
2012-11-30 Catrope(bug 42202) Validate preference values in action=options
 commit | commitdiff | tree
2012-09-27 csteipp(bug 33471) compare detectProtocol to 'https'
 commit | commitdiff | tree
2012-09-21 csteipp(bug 29898) Set cookie to force HTTPS from HTTP
 commit | commitdiff | tree
2012-08-31 csteipp(bug 39700) Add htmlspecialchars encoding to label
 commit | commitdiff | tree
2012-08-31 csteipp(bug 39184) LDAP password leakage
 commit | commitdiff | tree
2012-08-17 csteipp(bug 39180) Set x-frame-options='DENY' for api
 commit | commitdiff | tree
2012-08-14 csteipp(bug 35839) Check permisions for revdel blocks
 commit | commitdiff | tree
2012-08-07 csteipp(bug 24437) Add nofollow to image link
 commit | commitdiff | tree
2012-07-09 Niklas Laxström(bug 37587) Enforce language codes to be html safe
 commit | commitdiff | tree
2012-05-01 csteipp(bug 29296) Expanded Blacklist for SVG Files
 commit | commitdiff | tree
Wiklou, le Wiki du Wiklou