MantisBT: master 4362aa14

Diff Back to Repository
Author Committer Branch Timestamp Parent
dregad dregad master 2013-01-19 17:22 master 42627a65
Affected Issues  0015388: Update the match_type parameter to be XSS-safe by itself
Changeset

Update match_type parameter to be XSS-safe by itself

Use of gpc_get_int() instead of gpc_get_string() prevents malicious
users from passing arbitrary strings as parameter.

Fixes 0015388
mod - core/filter_api.php Diff File
mod - search.php Diff File
mod - view_all_set.php Diff File