<feed xmlns='http://www.w3.org/2005/Atom'>
<title>markzz/aurweb.git/web/template, branch v2.1.0</title>
<subtitle>aurweb working repository</subtitle>
<id>https://git.markzz.net/markzz/aurweb.git/atom/web/template?h=v2.1.0</id>
<link rel='self' href='https://git.markzz.net/markzz/aurweb.git/atom/web/template?h=v2.1.0'/>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/'/>
<updated>2013-02-10T11:11:36Z</updated>
<entry>
<title>Fix default selection on the account edit page</title>
<updated>2013-02-10T11:11:36Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2012-11-18T09:21:51Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=21e6c3f65ff4b0daeac75d6d66dcdd33fb98d646'/>
<id>urn:sha1:21e6c3f65ff4b0daeac75d6d66dcdd33fb98d646</id>
<content type='text'>
We used a mixture of account type IDs and account type descriptions on
the account edit page. This resulted in the account type field always
defaulting to "Normal user" after an invalid form had been submitted.

Consistently use account type IDs to avoid this.

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Merge branch 'maint'</title>
<updated>2013-01-30T08:25:42Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2013-01-30T08:25:42Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=8b791dee91bef312a0c3d06a8b77a5363720a88e'/>
<id>urn:sha1:8b791dee91bef312a0c3d06a8b77a5363720a88e</id>
<content type='text'>
</content>
</entry>
<entry>
<title>pkg_details.php: Add missing translatable string</title>
<updated>2013-01-30T08:25:27Z</updated>
<author>
<name>canyonknight</name>
<email>canyonknight@gmail.com</email>
</author>
<published>2013-01-22T02:14:56Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=e4ad05533f2929bc8291923a8d4bef1c8fc55675'/>
<id>urn:sha1:e4ad05533f2929bc8291923a8d4bef1c8fc55675</id>
<content type='text'>
Signed-off-by: canyonknight &lt;canyonknight@gmail.com&gt;
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Merge branch 'maint'</title>
<updated>2013-01-19T11:21:26Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2013-01-19T11:21:26Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=49e61845085aff6076a3dde056d08a278f447e6d'/>
<id>urn:sha1:49e61845085aff6076a3dde056d08a278f447e6d</id>
<content type='text'>
</content>
</entry>
<entry>
<title>user_table.php: Remove unused link parameter</title>
<updated>2013-01-19T11:21:12Z</updated>
<author>
<name>canyonknight</name>
<email>canyonknight@gmail.com</email>
</author>
<published>2013-01-14T21:24:50Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=d23a8706716415ecd5a51e93c8cb2b0d69056f03'/>
<id>urn:sha1:d23a8706716415ecd5a51e93c8cb2b0d69056f03</id>
<content type='text'>
Signed-off-by: canyonknight &lt;canyonknight@gmail.com&gt;
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>We live in 2013 now</title>
<updated>2013-01-19T11:20:50Z</updated>
<author>
<name>Marcel Korpel</name>
<email>marcel.lists@gmail.com</email>
</author>
<published>2013-01-06T13:34:06Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=398fdb67ead0dd0fe82a9983f6aa0c99f322d806'/>
<id>urn:sha1:398fdb67ead0dd0fe82a9983f6aa0c99f322d806</id>
<content type='text'>
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Add description meta-element to package pages</title>
<updated>2013-01-19T11:18:13Z</updated>
<author>
<name>Marcel Korpel</name>
<email>marcel.lists@gmail.com</email>
</author>
<published>2013-01-09T17:41:33Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=8e1051932eb86ef87f7b64efc86f50e633201b56'/>
<id>urn:sha1:8e1051932eb86ef87f7b64efc86f50e633201b56</id>
<content type='text'>
Implements FS#33294

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>pkg_details.php: Fix potential XSS for package names and dep conditions</title>
<updated>2012-11-06T23:59:28Z</updated>
<author>
<name>canyonknight</name>
<email>canyonknight@gmail.com</email>
</author>
<published>2012-11-06T22:13:45Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=4161e147969a3445ffd84dcd10b99baaee523bce'/>
<id>urn:sha1:4161e147969a3445ffd84dcd10b99baaee523bce</id>
<content type='text'>
Package names and dep conditions can be specially crafted for an XSS
attack. Properly sanitize these variables on the package details page.

In addition, avoid including dep conditions as part of a package link.

Signed-off-by: canyonknight &lt;canyonknight@gmail.com&gt;
Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>Avoid use of "$_SERVER['REQUEST_URI']"</title>
<updated>2012-11-04T18:19:32Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2012-11-04T18:13:03Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=630f1cbae8473fb05e5f5af7244eccc60fe93812'/>
<id>urn:sha1:630f1cbae8473fb05e5f5af7244eccc60fe93812</id>
<content type='text'>
Use the routing library to build proper URIs instead of relying on the
"REQUEST_URI" server variable which can be manipulated and might return
bogus URIs.

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
<entry>
<title>pkg_details.php: Remove plural from the adopt/disown button</title>
<updated>2012-11-04T16:08:35Z</updated>
<author>
<name>Lukas Fleischer</name>
<email>archlinux@cryptocrack.de</email>
</author>
<published>2012-11-04T16:05:12Z</published>
<link rel='alternate' type='text/html' href='https://git.markzz.net/markzz/aurweb.git/commit/?id=73656e17bd93132dc6864c4730a549f538fbf6bd'/>
<id>urn:sha1:73656e17bd93132dc6864c4730a549f538fbf6bd</id>
<content type='text'>
Fixes FS#32455.

Signed-off-by: Lukas Fleischer &lt;archlinux@cryptocrack.de&gt;
</content>
</entry>
</feed>
