WebSession: escape invalid login form parameters
- Escape login form parameters in many places in order to avoid XSS.
- Plugged a simple version of login_method washer.
- Escaped some action names and values in warning messages.
Tibor Simko <tibor.simko@cern.ch> | Apr 29 2009, 18:58 |