aurweb/web/template
canyonknight 4161e14796 pkg_details.php: Fix potential XSS for package names and dep conditions
Package names and dep conditions can be specially crafted for an XSS
attack. Properly sanitize these variables on the package details page.

In addition, avoid including dep conditions as part of a package link.

Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
2012-11-07 00:59:28 +01:00
..
stats Implement word-wrap for package statistics 2012-10-28 02:17:54 +02:00
account_details.php account_details.php: Fix XHTML tags being closed incorrectly 2012-10-20 18:47:01 +02:00
account_edit_form.php account_edit_form.php: Fix some XHTML errors 2012-10-20 18:47:01 +02:00
account_search_results.php Use echo shortcut syntax 2012-09-24 12:23:04 +02:00
actions_form.php Deprecate actions bar when virtual URLs are used 2012-09-28 08:57:25 +02:00
footer.php Use echo shortcut syntax 2012-09-24 12:23:04 +02:00
header.php header.php: Do not lowercase language selection entries 2012-11-04 16:49:47 +01:00
pkg_comment_form.php Avoid use of "$_SERVER['REQUEST_URI']" 2012-11-04 19:19:32 +01:00
pkg_comments.php pkg_comments.php: Move delete button to same line as poster info 2012-10-11 21:20:01 +02:00
pkg_details.php pkg_details.php: Fix potential XSS for package names and dep conditions 2012-11-07 00:59:28 +01:00
pkg_search_form.php Use echo shortcut syntax 2012-09-24 12:23:04 +02:00
pkg_search_results.php pkg_search_results.php: Mark out-of-date packages 2012-10-14 15:07:25 +02:00
search_accounts_form.php Use echo shortcut syntax 2012-09-24 12:23:04 +02:00
template.phps rename *.inc files to *.inc.php and adjust imports and references 2011-06-22 15:15:04 +02:00
tu_details.php Refactor TU voters list 2012-10-08 14:08:06 +02:00
tu_list.php tu_list.php: Remove stray "</span>" tags 2012-10-20 18:47:01 +02:00