markzz/aurweb.git/web/template, branch v2.0.1aurweb working repositoryhttps://git.markzz.net/markzz/aurweb.git/atom/web/template?h=v2.0.12012-11-06T23:59:28Zpkg_details.php: Fix potential XSS for package names and dep conditions2012-11-06T23:59:28Zcanyonknightcanyonknight@gmail.com2012-11-06T22:13:45Zurn:sha1:4161e147969a3445ffd84dcd10b99baaee523bce
Package names and dep conditions can be specially crafted for an XSS
attack. Properly sanitize these variables on the package details page.
In addition, avoid including dep conditions as part of a package link.
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Avoid use of "$_SERVER['REQUEST_URI']"2012-11-04T18:19:32ZLukas Fleischerarchlinux@cryptocrack.de2012-11-04T18:13:03Zurn:sha1:630f1cbae8473fb05e5f5af7244eccc60fe93812
Use the routing library to build proper URIs instead of relying on the
"REQUEST_URI" server variable which can be manipulated and might return
bogus URIs.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
pkg_details.php: Remove plural from the adopt/disown button2012-11-04T16:08:35ZLukas Fleischerarchlinux@cryptocrack.de2012-11-04T16:05:12Zurn:sha1:73656e17bd93132dc6864c4730a549f538fbf6bd
Fixes FS#32455.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Add missing internationalization to a few strings2012-11-04T16:08:31ZLukas Fleischerarchlinux@cryptocrack.de2012-11-04T16:02:13Zurn:sha1:274182a424e9ccce8966832bd457c4140bb1ceea
Fixes FS#32449.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
header.php: Do not lowercase language selection entries2012-11-04T15:49:47ZLukas Fleischerarchlinux@cryptocrack.de2012-11-04T15:49:47Zurn:sha1:4e4db4133bb7bdbc99d83934081b0315c461861a
Commit 091c2b5f5523773604699b914c19e6b02ce290bc introduced lower casing
to the language drop-down list. Revert this and use htmlspecialchars()
to escape language entries instead.
Addresses FS#32453.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Implement word-wrap for package statistics2012-10-28T00:17:54ZLukas Fleischerarchlinux@cryptocrack.de2012-10-23T17:08:29Zurn:sha1:6897bb00979238b80d6aa3ad3741d1856ea81c6a
Word-wrap labels in the package statistics box, just as we wrap package
names in the "Recent Updates" box.
Addresses FS#32160.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Use HTTPS links everywhere for Arch sites2012-10-22T10:33:11ZDan McGeedan@archlinux.org2012-10-21T16:05:51Zurn:sha1:5222bf09320ebc1cd5da799970fcc0d2dd32bb3f
The main site, wiki, and BBS are using HTTPS exclusively, so link
directly to the correct protocol rather than forcing a redirect.
Signed-off-by: Dan McGee <dan@archlinux.org>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
Link to the HTTPs login page in the header2012-10-21T00:50:06ZLukas Fleischerarchlinux@cryptocrack.de2012-10-21T00:50:06Zurn:sha1:7e201e5a3a7e85aea89f076b89626604b6b2b7bb
Change the login link so that it points directly to the HTTPs version of
the login page if "$DISABLE_HTTP_LOGIN" is set and if HTTP is used.
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
account_details.php: Fix XHTML tags being closed incorrectly2012-10-20T16:47:01Zcanyonknightcanyonknight@gmail.com2012-10-18T21:12:28Zurn:sha1:a9f052036d89df5cff91f382ef7890fab37be41e
Replace incorrect </td> tags with </th> tags
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
account_edit_form.php: Fix some XHTML errors2012-10-20T16:47:01Zcanyonknightcanyonknight@gmail.com2012-10-18T21:12:27Zurn:sha1:4cf84f978bd386bd30888c5a4f497b2541cc689f
* Add </option> close tags
* Add VI delimiter to selected option
* Add quotes to language codes
Signed-off-by: canyonknight <canyonknight@gmail.com>
Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>