|
|
|
@ -28,7 +28,6 @@ Files Changed and Security Fixes:
|
|
|
|
|
|
|
|
|
|
|
|
- "class.parsexml.php"
|
|
|
|
- "class.parsexml.php"
|
|
|
|
* Added element name sanitization to prevent XML injection
|
|
|
|
* Added element name sanitization to prevent XML injection
|
|
|
|
* Added strip_tags() to remove HTML/XML from extracted content
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- "class.peer.php"
|
|
|
|
- "class.peer.php"
|
|
|
|
* Added input validation in constructor for all parameters
|
|
|
|
* Added input validation in constructor for all parameters
|
|
|
|
@ -47,10 +46,6 @@ Files Changed and Security Fixes:
|
|
|
|
* Callsign format validation
|
|
|
|
* Callsign format validation
|
|
|
|
* Module validation
|
|
|
|
* Module validation
|
|
|
|
|
|
|
|
|
|
|
|
- "config.inc.php"
|
|
|
|
|
|
|
|
* Secured external config file inclusion with path validation
|
|
|
|
|
|
|
|
* Added realpath() checks to prevent directory traversal
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- "modules.php"
|
|
|
|
- "modules.php"
|
|
|
|
* All output wrapped with sanitize_output() to prevent XSS
|
|
|
|
* All output wrapped with sanitize_output() to prevent XSS
|
|
|
|
|
|
|
|
|
|
|
|
|