Homec4science

WebSession: escape invalid login form parameters

Authored by Tibor Simko <tibor.simko@cern.ch> on Apr 29 2009, 18:58.

Description

WebSession: escape invalid login form parameters

  • Escape login form parameters in many places in order to avoid XSS.
  • Plugged a simple version of login_method washer.
  • Escaped some action names and values in warning messages.

Details

Committed
Tibor Simko <tibor.simko@cern.ch>Apr 29 2009, 18:58
Parents
R3600:3247a02eb2e0: BibUpload: improve --correct documentation
Branches
Unknown
Tags
Unknown

Event Timeline

Tibor Simko <tibor.simko@cern.ch> committed R3600:013a9c4cdc5a: WebSession: escape invalid login form parameters (authored by Tibor Simko <tibor.simko@cern.ch>).Apr 29 2009, 18:58