dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3f0ecb9) | patch
Add taint annotation and warnings to Language::convert() et al
authorBrian Wolff <bawolff+wn@gmail.com>
Sat, 1 Sep 2018 08:25:37 +0000 (08:25 +0000)
committerLegoktm <legoktm@member.fsf.org>
Sat, 1 Sep 2018 18:10:55 +0000 (18:10 +0000)
commit8dbf6a7b31925a8b9e968d788b4f62890881eca6
tree426f8521018468a0bc820438a2d500599c5855d6tree | snapshot
parent3f0ecb922794183b3321849c520bdf889da7f259commit | diff
Add taint annotation and warnings to Language::convert() et al

If you feed this method unescaped data, it can cause later calls
to be an XSS, which is something I think deserves a warning.

Bug: T202571
Change-Id: I34cb3da9232a22defffb80466263c2f2233822ef
languages/Language.php diff | blob | history
languages/LanguageConverter.php diff | blob | history
Wiklou, le Wiki du Wiklou