Changeset 1201 for trunk/core/data/System/SiteChanges.txt

Timestamp:

12/07/08 17:13:55 (3 years ago)

Author:

KennethLavrsen

Message:

Item375: Eliminate use of URLPARAM in docs so it becomes an XSS trap
Done with the System web topics now

File:

• trunk/core/data/System/SiteChanges.txt (modified) (1 diff)

trunk/core/data/System/SiteChanges.txt

@@ -8 +8 @@
 nosearch="on" 
 nototal="on" 
-limit="%URLPARAM{"limit" default="25"}%" 
-web="%URLPARAM{"web" default="all"}%" 
+limit="%URLPARAM{"limit" encode="quote" default="25"}%" 
+web="%URLPARAM{"web" encode="quote" default="all"}%" 
 excludetopic="WebStatistics" 
 reverse="on"