Lukas Fleischer 1f36664e9f web/html/pkgsubmit.php: Revamp tarball validation ... * Reorder checks. * Use simple string functions instead of regular expressions. * Check for type flags before validating paths. The latter ensures we don't treat tarball keywords/flags as directories. This avoids problems with bsdtar inserting PaxHeader attributes into the archive which look something like the following to Archive_Tar: PaxHeader/xcursor-protozoa xcursor-protozoa/ xcursor-protozoa/PaxHeader/PKGBUILD xcursor-protozoa/PKGBUILD This only occurs on certain filesystems (e.g. jfs), but the tarball is by no means invalid. When extracted, it will only contain the PKGBUILD within a single subdirectory. Addresses FS#28802. Thanks-to: Dave Reisner <dreisner@archlinux.org> Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>		2012-03-19 23:29:58 +01:00
..
css	Remove a boatload of inline table styles	2011-10-24 17:57:52 +02:00
images	titlelogo.png: Update again	2010-03-12 16:52:07 -05:00
account.php	Wrap mysql_real_escape_string() in a function	2011-10-24 17:57:54 +02:00
addvote.php	Wrap mysql_real_escape_string() in a function	2011-10-24 17:57:54 +02:00
index.php	Remove a boatload of inline table styles	2011-10-24 17:57:52 +02:00
logout.php	Wrap mysql_real_escape_string() in a function	2011-10-24 17:57:54 +02:00
packages.php	Use 'true' instead of 'True' everywhere	2011-08-11 16:17:09 +02:00
passreset.php	Always set the "To:" header when sending mail	2012-03-08 11:43:48 +01:00
pkgsubmit.php	web/html/pkgsubmit.php: Revamp tarball validation	2012-03-19 23:29:58 +01:00
rpc.php	Provide more examples on the RPC info page	2011-08-22 08:24:21 +02:00
rss.php	rename *.inc files to *.inc.php and adjust imports and references	2011-06-22 15:15:04 +02:00
tu.php	Set the title in the Trusted User page	2011-12-17 14:53:56 +01:00
voters.php	Wrap mysql_real_escape_string() in a function	2011-10-24 17:57:54 +02:00