Hamish Friedlander d8a1df4312 Further secure eval call in ConfigStaticManifest ... It shouldnt be possible to get ConfigStaticManifest to parse a user uploaded file, and if you could it shouldnt be possible to form PHP that token_get_all could parse which would end up executing any code. However just in case it is, this changes the eval to assign to a static, so the eval will give a syntax error if an attacker manages to make $value look like `ls` or some other expression		2013-03-13 12:42:48 +13:00
..
manifest	Further secure eval call in ConfigStaticManifest	2013-03-13 12:42:48 +13:00
ArrayLib.php	Add codesniffer that ensures indentation is with tabs.	2012-12-12 17:33:31 +13:00
ClassInfo.php	Removing ClassInfo::is_subclass_of(), use is_subclass_of() instead	2012-11-15 14:43:13 +13:00
Config.php	Some micro-optimisations for Config	2013-03-04 09:25:23 +13:00
Convert.php	Use preg_replace_callback over preg_replace with e modifier	2012-12-20 13:40:42 +13:00
Core.php	Extract statics via code analysis rather than introspection	2013-02-28 09:43:33 +13:00
DAG.php	FIX Remove instances of lines longer than 120c	2012-09-30 17:18:13 +13:00
Diff.php	Add codesniffer that ensures indentation is with tabs.	2012-12-12 17:33:31 +13:00
Extension.php	Method visibility according to coding conventions	2012-09-20 10:46:59 +02:00
HTMLCleaner.php	BUG Fixed issue with Deprecation failing to extract the module from a stacktrace, especially on non-unix systems	2012-10-17 11:57:16 +13:00
Object.php	Cache the merged version of any Config value in an in-mem LRU cache	2013-02-28 09:43:33 +13:00
PaginatedList.php	Merge remote-tracking branch 'origin/3.0' into 3.1	2013-01-21 11:14:57 +01:00
TempPath.php	Have tiny_mce_gzip.php use local silverstripe-cache folder if available	2012-09-19 16:43:17 +12:00