Andrew O'Neil 9bf3ae9a19 SECURITY: Ensure javascript content type is sent in form responses. If content type is html, and the javascript contains script tags within the content, this content will be executed.

2012-05-03 17:08:08 +02:00

..

ContentController.php

BUGFIX ContentController::SiteConfig() should look to the SiteTree record so an alternate SiteConfig is considered, if this method doesn't exist on the data record then fall back to the default SiteConfig

2011-02-02 14:19:53 +13:00

ContentNegotiator.php

BUGFIX Fixed ContentNegotiator to handle HTML and XHTML base tags properly when converting, regression from r108413

2011-02-02 14:19:42 +13:00

Controller.php

BUGFIX: Added condition to avoid error creating "PastMember" cookie on dev/build (ticket #5780) Thanks simon_w

2011-02-02 14:19:41 +13:00

Director.php

ENHANCEMENT: Ensure that forceSSL and protocol detection respects the X-Forwarded-Protocol header.

2012-02-03 09:39:10 +13:00

FormResponse.php

SECURITY: Ensure javascript content type is sent in form responses. If content type is html, and the javascript contains script tags within the content, this content will be executed.

2012-05-03 17:08:08 +02:00

HTTPRequest.php

BUGFIX: prevented HTTPRequest->shift() throwing notices when shifting multiple elements. APICHANGE: SS_HTTPRequest->shift($multiple) no longer returns an array of size $multiple spaced with nulls, it returns an array up to the size of $multiple.

2011-02-02 14:19:33 +13:00

HTTPResponse.php

ENHANCEMENT Added SS_HTTPResponse->setStatusDescription() as equivalent to setStatusCode(). Added documentation.

2011-02-02 14:20:02 +13:00

ModelAsController.php

BUGFIX: When finding an old page in the 404 handler, favour existing subpages over historical ones.

2011-02-02 14:19:21 +13:00

NestedController.php

MINOR Unified @package PHPdoc (added where missing, removed duplicates)

2008-06-15 13:33:53 +00:00

RequestHandler.php

BUGFIX Checking for existence of FormAction in Form->httpSubmission() to avoid bypassing $allowed_actions definitions in controllers containing this form

2011-02-02 14:20:06 +13:00

RootURLController.php

API CHANGE Removed deprecated function RootURLController::get_homepage_urlsegment(), please use RootURLController::get_homepage_link() instead!

2011-02-02 14:18:46 +13:00

SilverStripeNavigatorItem.php

SECURITY Escape links for SilverStripeNavigatorItem

2012-01-31 15:55:30 +01:00