Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

stable

Clone or download

Read-only

Merge commit 'refs/changes/68/9968/2' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD

Download Browse

* ssh://gerrit.tuleap.net:29418/tuleap: request #10839: SQL injection in tracker report search when a criteria is a cross references or a permissions on artifact field Change-Id: I97e8f8d08e8f0e06f0c8a2a53af00f5e169ac2e6

+16 −16
Joris MASSON (jmasson) 2017-11-21 15:07
Joris MASSON (jmasson) 2017-11-21 15:07
c9c2610f7f24f2d22985879f5bf95ee9bf5cde89
git #tuleap/stable/c9c2610f7f24f2d22985879f5bf95ee9bf5cde89

Modified Files

Side by side diff
Inline diff
Name
M plugins/tracker/include/Tracker/FormElement/Tracker_FormElement_Field_CrossReferences.class.php +11 −14 Go to diff View file
M plugins/tracker/include/Tracker/FormElement/Tracker_FormElement_Field_PermissionsOnArtifact.class.php +5 −2 Go to diff View file