Project

General

Profile

Download (2.39 KB) Statistics
| Branch: | Tag: | Revision:

# Date Author Comment
0284d79e 01/03/2020 04:37 PM Jim Pingle

This is 2020. Issue #9245

f3f98e97 10/02/2019 07:11 AM Phillip Davis

Fix random typos

38809d47 07/29/2019 05:50 PM Renato Botelho

Fix copyright message years to reflect BSDP -> ESF -> Netgate

bdbd8534 05/24/2019 07:47 PM Jim Pingle

Privilege matching -- allow JS anchors. Fixes #9550

Attempts to detect a special case where a file does not actually
exist, and yet should be allowed since it is used by JavaScript.

So long as the anchor name doesn't contain any characters that might let...

0604f688 05/10/2019 07:28 PM Jim Pingle

Strengthen path privilege check. Fixes #9513

  • Removes/resolves any relative paths in the submitted URL
  • Validates that the file exists
  • Trims the path component off after in a nicer way
0b4c14a4 01/02/2019 02:50 PM Steve Beaver

Update copyright notices to 2019. Happy New Year

b8f91b7c 01/05/2018 01:44 PM Luiz Souza

Update the Copyright notice for pfSense.

ddd54e83 05/15/2017 08:30 PM Pi Ba

auth_check, move the cmp_page_matches() to its own file so it can be shared by both auth_check.inc and priv.inc