diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2011-06-11 17:12:39 +0200 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2011-06-13 14:26:35 +0200 |
| commit | 1ca2719c7488662ebd7964c0d026e0890f923ee9 (patch) | |
| tree | 357c5ff92e79eaefbed0adb76f27b9b848124d15 /inc/parser/xhtmlsummary.php | |
| parent | 00162124b39c86b67dd3890ce992e568ed41cbee (diff) | |
| download | rpg-1ca2719c7488662ebd7964c0d026e0890f923ee9.tar.gz rpg-1ca2719c7488662ebd7964c0d026e0890f923ee9.tar.bz2 | |
Only allow known protocols in RSS links
This fixes a security vulnerability where an attacker could introduce
JavaScript links into wiki pages by including a prepared RSS feed.
Diffstat (limited to 'inc/parser/xhtmlsummary.php')
0 files changed, 0 insertions, 0 deletions