Anton Reutov 0031c93535

Merge pull request #1865 from sergio-nadal/security-fixes ...

Security fixes - CSRF / Command Injection / XSS

2019-04-22 19:48:00 +03:00

..

add

Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.

2019-04-21 00:11:36 +02:00

api

Security fix for API hash check

2018-06-24 10:38:16 +03:00

bulk

WEB. Replaced split with explode. This closed #878

2016-10-20 09:37:41 -04:00

css

WEB. File Manager, positioning hotkeys popup at the middle of the screen

2016-12-02 09:33:55 -05:00

delete

Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.

2019-04-21 00:11:36 +02:00

download

Update index.php

2017-02-03 01:37:07 +08:00

edit

Fixed several Command Injection.

2019-04-21 01:51:29 +02:00

error

replaces start page with main page

2014-10-05 14:43:11 +03:00

file_manager

setting content type to fix possible XSS attack vector

2019-04-12 17:21:28 +03:00

generate/ssl

Challenging routing on render_page

2016-07-02 21:40:46 +09:00

images

Merge pull request #768 from PeterDaveHello/image-optimize

2016-09-05 16:34:57 +03:00

inc

Updated Spanish translation

2019-04-22 14:47:32 +02:00

js

enable/disable softaculous plugin

2017-12-21 12:19:01 +02:00

list

Fix some XSS.

2019-04-21 02:18:24 +02:00

login

Auth fix 0.9.8-20

2018-04-09 00:44:32 +03:00

logout

Replaced CRLF by LF again

2013-01-19 23:57:58 +04:00

reset

Fix bug in password reset

2018-10-18 10:01:35 +02:00

restart

Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.

2019-04-21 00:11:36 +02:00

schedule

Revert "[SECURITY] Fix OS command injection."

2015-12-11 21:14:49 +02:00

search

Challenging routing on render_page

2016-07-02 21:40:46 +09:00

start/service

Revert "[SECURITY] Fix OS command injection."

2015-12-11 21:14:49 +02:00

stop/service

Update index.php

2017-03-04 22:45:02 +00:00

suspend

Revert "[SECURITY] Fix OS command injection."

2015-12-11 21:14:49 +02:00

templates

Fix some XSS.

2019-04-21 02:18:24 +02:00

unsuspend

Revert "[SECURITY] Fix OS command injection."

2015-12-11 21:14:49 +02:00

update/vesta

Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.

2019-04-21 00:11:36 +02:00

upload

Vesta CP 0.9.8–20 rXSS to RCE / solves #1558

2018-05-11 16:17:23 +03:00

view/file

Additional rXSS fix / closes #1558

2018-05-16 17:23:04 +03:00

favicon.ico

favicon update

2016-08-30 16:27:42 +03:00

hotkeys.html

ketboard shortcuts for vesta control panel

2015-09-14 17:06:34 +03:00

index.php

Merge pull request #422 from SysVoid/patch-1

2015-10-22 16:56:26 +03:00

robots.txt

added robots.txt which pervents indexing by search engines

2016-12-16 02:50:33 +03:00