BPI/luci
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
luci/modules
History
Jo-Philipp Wich 5f30aa0e19 luci-base: dispatcher.lua: prevent XSS through 404 error template 
Make sure to escape the user controlled URL passed as part of the error
message into the error404 template in order to avoid XSS.

Reported-by: 40826d <40826d@posteo.de>
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
(backported from commit cd8bea94e61fa72a0a2ba7bc54d7b2d7b7572519)
2023-03-10 15:37:36 +01:00
..
luci-base
luci-base: dispatcher.lua: prevent XSS through 404 error template
2023-03-10 15:37:36 +01:00
luci-compat
luci-base: prevent empty field for adding new entry
2022-02-16 00:49:04 +01:00
luci-mod-admin-full
luci-base: use cgi-io and rpcd-mod-file to handle file upload and browsing
2019-09-10 15:28:16 +02:00
luci-mod-admin-mini
treewide: removed trailing whitespaces and extra newlines in 'modules'
2021-01-20 17:48:16 +02:00
luci-mod-battstatus
luci-mod-battstatus: chmod battstatus.js to 644
2021-08-17 12:11:14 +02:00
luci-mod-dashboard
treewide: minor fixes to typos, whitespace, and indentation
2021-01-20 12:36:13 +02:00
luci-mod-failsafe
…
luci-mod-network
luci-mod-network: Offer ft-over-air by default for 802.11r
2022-09-01 18:15:18 +03:00
luci-mod-rpc
treewide: removed trailing whitespaces and extra newlines in 'modules'
2021-01-20 17:48:16 +02:00
luci-mod-status
luci-mod-status,mod-network: Added fqdn-name to DHCPv4 lease table
2022-03-31 00:26:59 +05:00
luci-mod-system
luci-mod-system: fix potential stored XSS
2023-01-13 21:18:49 +01:00