OSDN Git Service

various modifications to prevent xss
authorJean-Philippe Lang <jp_lang@yahoo.fr>
Sun, 17 Dec 2006 08:10:18 +0000 (08:10 +0000)
committerJean-Philippe Lang <jp_lang@yahoo.fr>
Sun, 17 Dec 2006 08:10:18 +0000 (08:10 +0000)
commit2b86ef8e28d0e5376197391c29a8fb302f14820f
treee5a80fb24158b350507c28021418a19aa7084991
parent3e28dc669b014db811c0de673a090adf54f42bc1
various modifications to prevent xss
- validation of names and labels against /^[\w\s\'\-]*$/i
- html entities encoding

git-svn-id: http://redmine.rubyforge.org/svn/trunk@99 e93f8b46-1217-0410-a6f0-8f06a7374b81
34 files changed:
app/helpers/issues_helper.rb
app/models/custom_field.rb
app/models/enumeration.rb
app/models/issue_status.rb
app/models/project.rb
app/models/role.rb
app/models/tracker.rb
app/models/user.rb
app/views/admin/projects.rhtml
app/views/documents/_document.rhtml [new file with mode: 0644]
app/views/issues/_history.rhtml
app/views/issues/_list_simple.rhtml
app/views/issues/change_status.rhtml
app/views/issues/show.rhtml
app/views/my/blocks/_calendar.rhtml
app/views/my/blocks/_documents.rhtml
app/views/my/blocks/_latest_news.rhtml
app/views/my/page.rhtml
app/views/my/page_layout.rhtml
app/views/news/_news.rhtml [new file with mode: 0644]
app/views/news/show.rhtml
app/views/projects/activity.rhtml
app/views/projects/calendar.rhtml
app/views/projects/changelog.rhtml
app/views/projects/export_issues_pdf.rfpdf
app/views/projects/gantt.rhtml
app/views/projects/list.rhtml
app/views/projects/list_documents.rhtml
app/views/projects/list_issues.rhtml
app/views/projects/list_news.rhtml
app/views/projects/show.rhtml
app/views/users/_form.rhtml
app/views/welcome/index.rhtml
public/stylesheets/application.css