Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/17/10617/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #11171: Downloading a file of the FRS from the webdav web browser plugin can lead to XSS Change-Id: I60385ece8b7324f2ccacb9696c1429b02406c63e

+20 −32
Joris MASSON (jmasson) 2018-02-23 11:11
Joris MASSON (jmasson) 2018-02-23 11:11
b1e6c9a5d9020e0af284c7a33ad0c818801ab1b1
git #tuleap/stable/b1e6c9a5d9020e0af284c7a33ad0c818801ab1b1

Modified Files

Side by side diff
Inline diff
Name
M plugins/webdav/include/FS/WebDAVFRSFile.class.php +13 −10 Go to diff View file
M plugins/webdav/tests/WebDAVFRSFileTest.php +7 −22 Go to diff View file