Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Remove the cookies used by PHPWiki

Download Browse

They are not needed and the data they contains can be passed directly to unserialize() This contribution must not break anything in PHPWiki This contribution is part of request #10118: remote code execution through object unserialization of a user's recent elements Change-Id: I5e19431a7da2337da5f146580bae3aeba7a71506

+4 −194
Thomas Gerbet (tgerbet) 2017-04-05 17:31
Thomas Gerbet (tgerbet) 2017-04-05 21:51
689f8248209ef696fa92860e63950a3fd9b86f3a
c97511aa64242101088a3d0fdf689c09f1dd5138
git #tuleap/stable/689f8248209ef696fa92860e63950a3fd9b86f3a

Modified Files

Side by side diff
Inline diff
Name
M src/common/wiki/phpwiki/lib/Request.php +1 −83 Go to diff View file
M src/common/wiki/phpwiki/lib/WikiUser.php +1 −6 Go to diff View file
M src/common/wiki/phpwiki/lib/WikiUserNew.php +0 −78 Go to diff View file
M src/common/wiki/phpwiki/lib/imagecache.php +2 −25 Go to diff View file
M src/common/wiki/phpwiki/lib/main.php +0 −2 Go to diff View file