create-alias.php, edit-alias.php:
- fix XSS in error message
templates/admin_list-domain.php:
- fix XSS (by values stored in the database) in "description" field
templates/fetchmail.php:
- fix XSS (by values stored in the database) in any field
templates/list-virtual.php:
- fix XSS (by values stored in the database) in "name" field
+ CHANGELOG.TXT update
Again, thanks to Filippo Cavallarin for pointing out those issues.
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/branches/postfixadmin-2.3@1330 a1433add-5e2c-0410-b055-b7f2511e0802
- define('POSTFIXADMIN', 1)
templates/*.php
- check if POSTFIXADMIN is defined to prevent direct access to the
template files
git-svn-id: https://svn.code.sf.net/p/postfixadmin/code/trunk@256 a1433add-5e2c-0410-b055-b7f2511e0802
Christian Boltz