davical

mirror of https://gitlab.com/davical-project/davical.git synced 2026-01-27 00:33:34 +00:00

History

Christoph Anton Mitterer ea1ca0be0c escape version string to prevent XSS for sure

* HTML escape the remotely retrieved version string printed to the HTML in order
  to prevent and attacks (if this would have been possible at all in 12
  characters).

The version string read from the davical.org webserver might be changed by an
attacker in order to perform XSS.
Even though this is highly unlikley (there are only 12 characters used) it's
better to HTML escape any such string that is printed to HTML.

This was originally reported at:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=703290

2013-09-02 14:38:05 +12:00

css

Don't disable upload field. Use library to create 'append mode' field.

2012-05-15 00:21:35 +12:00

images

Kinda working with both Lightning & Evolution now. About to restructure to

2006-09-21 18:24:26 +12:00

Fix replacement in multi-parameter string.

2009-11-21 20:58:16 +13:00

.gitignore

Now storing events, including parsing them into further SQL.

2006-09-12 04:36:37 -05:00