mirror of
https://github.com/LX3JL/xlxd.git
synced 2025-12-06 07:42:01 +01:00
XSS Vulnerability Patches and Security Enhancements for Dashboard1 - Update changes.txt to reflect reality
This commit is contained in:
parent
e11754a4e0
commit
c42b927cdb
|
|
@ -28,7 +28,6 @@ Files Changed and Security Fixes:
|
||||||
|
|
||||||
- "class.parsexml.php"
|
- "class.parsexml.php"
|
||||||
* Added element name sanitization to prevent XML injection
|
* Added element name sanitization to prevent XML injection
|
||||||
* Added strip_tags() to remove HTML/XML from extracted content
|
|
||||||
|
|
||||||
- "class.peer.php"
|
- "class.peer.php"
|
||||||
* Added input validation in constructor for all parameters
|
* Added input validation in constructor for all parameters
|
||||||
|
|
@ -47,10 +46,6 @@ Files Changed and Security Fixes:
|
||||||
* Callsign format validation
|
* Callsign format validation
|
||||||
* Module validation
|
* Module validation
|
||||||
|
|
||||||
- "config.inc.php"
|
|
||||||
* Secured external config file inclusion with path validation
|
|
||||||
* Added realpath() checks to prevent directory traversal
|
|
||||||
|
|
||||||
- "modules.php"
|
- "modules.php"
|
||||||
* All output wrapped with sanitize_output() to prevent XSS
|
* All output wrapped with sanitize_output() to prevent XSS
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue