mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 14:05:37 +02:00
d5b3dbc6fb
SECURITY More solid URL checks in Director::is_site_url(), using a conservative parse_url() hostname comparison rather than Director::makeRelative(), which is not designed for security purposes |
||
---|---|---|
.. | ||
ContentNegotiator.php | ||
Controller.php | ||
Cookie.php | ||
Director.php | ||
HTTP.php | ||
HTTPRequest.php | ||
HTTPResponse.php | ||
NullHTTPRequest.php | ||
PjaxResponseNegotiator.php | ||
RequestHandler.php | ||
Session.php |