XSS Vulnerability Patches and Security Enhancements for Dashboard1 - Update changes.txt to reflect reality

This commit is contained in:
Andy Taylor 2025-10-14 14:38:59 +01:00
parent e11754a4e0
commit c42b927cdb

View file

@ -28,7 +28,6 @@ Files Changed and Security Fixes:
- "class.parsexml.php" - "class.parsexml.php"
* Added element name sanitization to prevent XML injection * Added element name sanitization to prevent XML injection
* Added strip_tags() to remove HTML/XML from extracted content
- "class.peer.php" - "class.peer.php"
* Added input validation in constructor for all parameters * Added input validation in constructor for all parameters
@ -47,10 +46,6 @@ Files Changed and Security Fixes:
* Callsign format validation * Callsign format validation
* Module validation * Module validation
- "config.inc.php"
* Secured external config file inclusion with path validation
* Added realpath() checks to prevent directory traversal
- "modules.php" - "modules.php"
* All output wrapped with sanitize_output() to prevent XSS * All output wrapped with sanitize_output() to prevent XSS