MantisBT: master-1.2.x dbf923c3

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master-1.2.x 2013-01-19 17:22 master-1.2.x 26c8ca22
Affected Issues  0015388: Update the match_type parameter to be XSS-safe by itself
Changeset

Update match_type parameter to be XSS-safe by itself

Use of gpc_get_int() instead of gpc_get_string() prevents malicious
users from passing arbitrary strings as parameter.

Fixes 0015388
mod - core/filter_api.php Diff File
mod - search.php Diff File
mod - view_all_set.php Diff File