Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/43/8243/3' of ssh://gerrit.tuleap.net:29418/tuleap into stable

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #10159: Remote code execution through the SyntaxHighlighter plugin of PHPWiki

+33 −109
Nicolas Terray (nterray) 2017-04-21 08:42
Nicolas Terray (nterray) 2017-04-21 08:42
40acd9ef7e872d5e5af792d1fd9f7b4bd0e2d77f
git #tuleap/stable/40acd9ef7e872d5e5af792d1fd9f7b4bd0e2d77f

Modified Files

Side by side diff
Inline diff
Name
M src/common/wiki/phpwiki/lib/plugin/SyntaxHighlighter.php +23 −50 Go to diff View file
M src/common/wiki/phpwiki/pgsrc/SyntaxHighlighterPlugin +2 −4 Go to diff View file
D src/common/wiki/phpwiki/themes/default/highlight-emacs.css +0 −21 Go to diff View file
D src/common/wiki/phpwiki/uploads/highlight-emacs.css +0 −30 Go to diff View file
M tools/rpm/tuleap.rhel6.spec +5 −3 Go to diff View file
M tools/rpm/tuleap.rhel7.spec +3 −1 Go to diff View file