Changeset 13878

Show
Ignore:
Timestamp:
03/23/12 14:44:51 (1 year ago)
Author:
p_lindheimer
Message:

Merged revisions 13875,13877 via svnmerge from
http://www.freepbx.org/v2/svn/freepbx/branches/2.9

................

r13875 | p_lindheimer | 2012-03-23 11:33:41 -0700 (Fri, 23 Mar 2012) | 1 line


fixes potential XSS Security issue

................

r13877 | p_lindheimer | 2012-03-23 11:42:46 -0700 (Fri, 23 Mar 2012) | 9 lines


Merged revisions 13876 via svnmerge from
http://www.freepbx.org/v2/svn/freepbx/branches/2.10


........

r13876 | p_lindheimer | 2012-03-23 11:40:54 -0700 (Fri, 23 Mar 2012) | 1 line


fix potential XSS security issue

........

................

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • freepbx/branches/2.8

    • Property svn:mergeinfo changed from
      /freepbx/branches/2.10:13870
      /freepbx/branches/2.9:13871       to
      /freepbx/branches/2.10:13870,13876
      /freepbx/branches/2.9:13871,13875-13877
    • Property svnmerge-integrated changed from /freepbx/branches/2.9:1-11127,11134,11136,11138-11144,11148,11150-11167,11169-11215,11217-11227,11230-11239,11242,11245-11254,11256-11262,11264,11464,11622,11672,13871 /freepbx/branches/2.7:1-10414 to /freepbx/branches/2.9:1-11127,11134,11136,11138-11144,11148,11150-11167,11169-11215,11217-11227,11230-11239,11242,11245-11254,11256-11262,11264,11464,11622,11672,13871,13875-13877 /freepbx/branches/2.7:1-10414

  • freepbx/branches/2.8/amp_conf/htdocs/admin/views/freepbx_reload.php

    r10055 r13878  
    6161        $.ajax({ 
    6262          type: 'POST', 
    63           url: "<?php echo $_SERVER["PHP_SELF"]; ?>",  
     63          url: "<?php echo $_SERVER["SCRIPT_NAME"]; ?>",  
    6464          data: "handler=reload", 
    6565          dataType: 'json', 

  • freepbx/branches/2.8/amp_conf/htdocs/recordings/includes/login.php

    r9663 r13878  
    419419            </td> 
    420420            <td> 
    421               <input type='text' name='username' value='" . $login . "' maxlength=20 tabindex=1> 
     421              <input type='text' name='username' value='" . htmlspecialchars($login) . "' maxlength=20 tabindex=1> 
    422422            </td> 
    423423          </tr>