CSRF startup code has been moved to guiconfig.inc
Unbreak AJAX
Misc XSS fixes
Protect against XSS by someone broadcasting an HTML SSID... (better to be safe...)
One more potential XSS vector. Not sure how it would have text injected here, but better safe than sorry.
More notice XSS fixes.
Fix XSS issues
Fix XSS in notices.
Bring in XSS id fixes from m0n0wall
Clarify these descriptions a bit more on 1:1 edit.
View revisions
Also available in: Atom