dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: fe32899) | patch
Fix for XSS issue in bug 66608
authorGergő Tisza <tgr.huwiki@gmail.com>
Fri, 27 Jun 2014 00:15:03 +0000 (00:15 +0000)
committermglaser <glaser@hallowelt.biz>
Wed, 30 Jul 2014 18:26:47 +0000 (20:26 +0200)
commit410d33d36e9a4fe28f54aa4347310c52762b6e5e
tree7263ea9c762f2eda88b1d3c0ae5c4602933a725ftree | snapshot
parentfe32899523cf28708d81276d604a59b311fdd3cdcommit | diff
Fix for XSS issue in bug 66608

Generate the URL used for loading a new page in Javascript,
instead of relying on the URL in the link that has been clicked
(as that could have been crafted by an attacker).

Bug: 66608
Change-Id: I19e2bf3af017a37c35cbadce9a70194aac693f33
includes/page/ImagePage.php diff | blob | history
resources/Resources.php diff | blob | history
resources/src/mediawiki.page/mediawiki.page.image.pagination.js diff | blob | history
Wiklou, le Wiki du Wiklou