Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/38/10438/3' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #11061: XSS through wiki attachment

+100 −22
Nicolas Terray (nterray) 2018-02-01 15:24
Nicolas Terray (nterray) 2018-02-01 15:24
26c1a2b7cca796f1afc7831abcd926381ea22054
git #tuleap/stable/26c1a2b7cca796f1afc7831abcd926381ea22054

Modified Files

Side by side diff
Inline diff
Name
A src/common/Http/BinaryFileResponse.php +83 −0 Go to diff View file
M src/common/autoload.php +3 −2 Go to diff View file
M src/common/wiki/lib/WikiAttachmentRevision.class.php +14 −20 Go to diff View file