Home
last modified time | relevance | path

Searched hist:ada0d779eedf959f714490934d23a395e4560a32 (Results 1 – 3 of 3) sorted by relevance

/dokuwiki/_test/tests/inc/
H A Dhtml_secedit_pattern.test.phpada0d779eedf959f714490934d23a395e4560a32 Sun Apr 15 11:20:59 UTC 2018 Michael Hamann <michael@content-space.de> Prevent HTML and JS injection in section names

Before this change, HTML and some JS code (as far as it was not escaped
by json_encode) could be injected into the output as the closing pattern
that is checked by the regex is not escaped in JSON (see test case).

/dokuwiki/inc/parser/
H A Dxhtml.phpada0d779eedf959f714490934d23a395e4560a32 Sun Apr 15 11:20:59 UTC 2018 Michael Hamann <michael@content-space.de> Prevent HTML and JS injection in section names

Before this change, HTML and some JS code (as far as it was not escaped
by json_encode) could be injected into the output as the closing pattern
that is checked by the regex is not escaped in JSON (see test case).

/dokuwiki/inc/
H A Dhtml.phpada0d779eedf959f714490934d23a395e4560a32 Sun Apr 15 11:20:59 UTC 2018 Michael Hamann <michael@content-space.de> Prevent HTML and JS injection in section names

Before this change, HTML and some JS code (as far as it was not escaped
by json_encode) could be injected into the output as the closing pattern
that is checked by the regex is not escaped in JSON (see test case).