Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/07/3507/1' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #7788: Prevent persistent XSS in attachment of an artifact When a file is downloaded from Tuleap and have not been generated by the application, web browsers must not try to execute it. Change-Id: Ic241d8ec0313684c1e3d6e4acdf89eaa9bbb958c

+4 −4
dylan bowden (dylan) 2015-01-23 09:55
dylan bowden (dylan) 2015-01-23 09:55
e6c81555e91632eb0cd1c35cfa5b6b1803bba33f
git #tuleap/stable/e6c81555e91632eb0cd1c35cfa5b6b1803bba33f

Modified Files

Side by side diff
Inline diff
Name
M plugins/docman/include/view/Docman_View_Download.class.php +1 −1 Go to diff View file
M plugins/tracker/include/Tracker/FormElement/Tracker_FormElement_Field_File.class.php +1 −1 Go to diff View file
M src/www/docman/download.php +1 −1 Go to diff View file
M src/www/tracker/download.php +1 −1 Go to diff View file