Markus Bucher

markusbucher@gmx.de

  • Registered on: 2008-12-31
  • Last connection: 2015-06-01

Issues

Projects

Activity

2015-07-01

16:20 TYPO3 Core Revision 7695d91f: [SECURITY] XSS in Filelist
Properly escape user input when showing error messages
during file renaming.
Resolves: #59211
Releases: master, 6.2
...
16:17 TYPO3 Core Revision 128d2412: [SECURITY] XSS in Filelist
Properly escape user input when showing error messages
during file renaming.
Resolves: #59211
Releases: master, 6.2
...
16:09 TYPO3 Core Revision 6fa4c8e3: [SECURITY] XSS in Filelist
Properly escape user input when showing error messages
during file renaming.
Resolves: #59211
Releases: master, 6.2
...

2014-05-29

11:20 TYPO3 Core Bug #59199 (Closed): Element Browser: GET-Data is not unencoded in fields
The wizard browser takes it's set values out of a GET param. It fails to decode these params.
In the link field of...

2012-08-15

12:22 TYPO3 Core Revision 25186002: [SECURITY] XSS in validateForm
Properly quote the form name and field list
for the JavaScript validation
Fixes: #25052
Releases: 6.0, 4.7, 4.6, 4.5...
12:20 TYPO3 Core Revision a1c3165e: [SECURITY] Page Link Target vulnerable to XSS
This patch adds htmlspecialchars to page link target to prevent
XSS.
Change-Id: Iadf524cebd03428fad1880f25c1698fba41...
12:20 TYPO3 Core Revision 8cf7db71: [SECURITY] XSS in validateForm
Properly quote the form name and field list
for the JavaScript validation
Fixes: #25052
Releases: 6.0, 4.7, 4.6, 4.5...
12:19 TYPO3 Core Revision 2ae69c8a: [SECURITY] Page Link Target vulnerable to XSS
This patch adds htmlspecialchars to page link target to prevent
XSS.
Change-Id: I9e1ab1ac22c7bc1225f1d3d3234865e1e60...
12:19 TYPO3 Core Revision 1eaebd38: [SECURITY] XSS in validateForm
Properly quote the form name and field list
for the JavaScript validation
Fixes: #25052
Releases: 6.0, 4.7, 4.6, 4.5...
12:18 TYPO3 Core Revision 85df0e45: [SECURITY] Page Link Target vulnerable to XSS
This patch adds htmlspecialchars to page link target to prevent
XSS.
Change-Id: Ib8f812f89f892f580fc70300a4e4fa22875...

Also available in: Atom