Matt Pass
|
a470daf9f5
|
No need for other chars to be replaced
Impossible to output an XSS without < or > alone
|
2014-05-03 14:13:48 +01:00 |
|
Matt Pass
|
75885aecf5
|
strClean now replaces javascript:
htmlentities doesn't cover : and str_replace on : is too vague
regex is case insensitive
|
2014-04-26 12:25:12 +01:00 |
|
Matt Pass
|
9a2881cd7b
|
Remove comma
|
2014-04-24 12:10:17 +01:00 |
|
Matt Pass
|
c88d4f46e3
|
Rewrite of xssClean function to be neater
|
2014-04-23 07:41:30 +01:00 |
|
Matt Pass
|
d6a7db8f3e
|
xssClean function added
Had 4 different contexts, the first 2 alter parts of strings, the last 2
remove those parts
|
2014-04-22 08:05:40 +01:00 |
|
Matt Pass
|
6030e9a4ca
|
This is now set, in headers.php
|
2014-04-18 17:59:27 +01:00 |
|
Matt Pass
|
03c0842ba2
|
Common settings/functions now in own file
|
2014-01-11 15:14:04 +00:00 |
|