[phpmyadmin/phpmyadmin] 6943ff: Escape database name in URL

Branch: refs/heads/QA_4_8 Home: https://github.com/phpmyadmin/phpmyadmin Commit: 6943fff87324bd54c3a37a5160a5fb77498c355e https://github.com/phpmyadmin/phpmyadmin/commit/6943fff87324bd54c3a37a5160a5... Author: William Desportes <williamdes@wdes.fr> Date: 2018-06-19 (Tue, 19 Jun 2018) Changed paths: M js/designer/move.js Log Message: ----------- Escape database name in URL Designer > new page shows iframe when db name is: "'"><iframe onload=alert(1)> Signed-off-by: William Desportes <williamdes@wdes.fr> Commit: ead0d0d98520ce0bc5251f58e52e0a3d1809b2fd https://github.com/phpmyadmin/phpmyadmin/commit/ead0d0d98520ce0bc5251f58e52e... Author: Isaac Bennetch <bennetch@gmail.com> Date: 2018-06-19 (Tue, 19 Jun 2018) Changed paths: M ChangeLog Log Message: ----------- ChangeLog entry for PMASA-2016-03, XSS in Designer. This is commit 6943fff87324bd54c3a37a5160a5fb77498c355e, cherry-picked from master. Signed-off-by: Isaac Bennetch <bennetch@gmail.com> Commit: 26c6e87682ec0e1e35b8cc5dd03569e55c763dd8 https://github.com/phpmyadmin/phpmyadmin/commit/26c6e87682ec0e1e35b8cc5dd035... Author: Isaac Bennetch <bennetch@gmail.com> Date: 2018-06-21 (Thu, 21 Jun 2018) Changed paths: M ChangeLog M js/designer/move.js Log Message: ----------- Merge remote-tracking branch 'security/QA_4_8-security' into QA_4_8 Commit: 2867a95523e533ec30fa63149fd18e6cc5e9cc16 https://github.com/phpmyadmin/phpmyadmin/commit/2867a95523e533ec30fa63149fd1... Author: Isaac Bennetch <bennetch@gmail.com> Date: 2018-06-21 (Thu, 21 Jun 2018) Changed paths: M ChangeLog Log Message: ----------- Update Changelog for RCE/file inclusion security issue Signed-off-by: Isaac Bennetch <bennetch@gmail.com> Commit: d363fa02c6d51efa2ca07fd052cbec0377703293 https://github.com/phpmyadmin/phpmyadmin/commit/d363fa02c6d51efa2ca07fd052cb... Author: Isaac Bennetch <bennetch@gmail.com> Date: 2018-06-21 (Thu, 21 Jun 2018) Changed paths: M ChangeLog M README M doc/conf.py M libraries/classes/Config.php Log Message: ----------- Prepare for version 4.8.2 Signed-off-by: Isaac Bennetch <bennetch@gmail.com> Commit: 3115f340b933ab95e75785af02d6d497a04f47b3 https://github.com/phpmyadmin/phpmyadmin/commit/3115f340b933ab95e75785af02d6... Author: Isaac Bennetch <bennetch@gmail.com> Date: 2018-06-21 (Thu, 21 Jun 2018) Changed paths: A composer.lock Log Message: ----------- Adding composer lock for 4.8.2 Signed-off-by: Isaac Bennetch <bennetch@gmail.com> Commit: 064f6cc0ec62aeb18dc93c52b42ece6244fa9d09 https://github.com/phpmyadmin/phpmyadmin/commit/064f6cc0ec62aeb18dc93c52b42e... Author: Isaac Bennetch <bennetch@gmail.com> Date: 2018-06-21 (Thu, 21 Jun 2018) Changed paths: R composer.lock Log Message: ----------- Removing composer.lock Signed-off-by: Isaac Bennetch <bennetch@gmail.com> Compare: https://github.com/phpmyadmin/phpmyadmin/compare/536b214757ad...064f6cc0ec62 **NOTE:** This service been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/ Functionality will be removed from GitHub.com on January 31st, 2019.
participants (1)
-
Isaac Bennetch