Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

request #11171: Downloading a file of the FRS from the webdav web browser plugin can lead to XSS

Download Browse

Change-Id: I15efe661a1cff43debf90347bd947d1284c0e62f

+20 −32
Thomas Gerbet (tgerbet) 2018-02-20 10:53
Thomas Gerbet (tgerbet) 2018-02-20 11:51
c28f7146f248b7d614b730560a558bba4d8fcf28
965b2e7342f000e004b05908bc465897dce77c53
git #tuleap/stable/c28f7146f248b7d614b730560a558bba4d8fcf28

Modified Files

Side by side diff
Inline diff
Name
M plugins/webdav/include/FS/WebDAVFRSFile.class.php +13 −10 Go to diff View file
M plugins/webdav/tests/WebDAVFRSFileTest.php +7 −22 Go to diff View file