• Martijn Pieters's avatar
    Big change · 22206337
    Martijn Pieters authored
    - Make DTML automatically html quote data indirectly taken from REQUEST
      which contain a '<'. Make sure (almost) all string operation preserve the
      taint on this data.
    
    - Fix exceptions that use REQUEST data; quote the data.
    
    - Don't let form and cookie values mask the REQUEST computed values such as
      URL0 and BASE1.
    22206337
To find the state of this project's repository at the time of any of these versions, check out the tags.
CHANGES.txt 19.9 KB