wiki.techinc.nl/includes/upload
csteipp fdc70074bb SECURITY: Don't use m modifier when checking link prefix
SVG filter incorrectly used the m modifier when checking if an href
attribute started with 'https?://', incorrectly matching attributes
such as, "javascript:alert('
http://foo')".

Bug: T122653
Change-Id: I41291fff344241cad3171f3e8050de99b62a2296

Signed-off-by: Chad Horohoe <chadh@wikimedia.org>
2016-05-20 09:47:45 -07:00
..
UploadBase.php SECURITY: Don't use m modifier when checking link prefix 2016-05-20 09:47:45 -07:00
UploadFromChunks.php Many more function case mismatches 2016-03-19 00:20:58 +00:00
UploadFromFile.php Convert all array() syntax to [] 2016-02-17 01:33:00 -08:00
UploadFromStash.php UploadFromStash: Only remove stashed file on successful uploads 2016-01-21 23:56:16 +01:00
UploadFromUrl.php Many more function case mismatches 2016-03-19 00:20:58 +00:00
UploadStash.php Many more function case mismatches 2016-03-19 00:20:58 +00:00