XSS Vulnerability Patches and Security Enhancements for Dashboard1 - Update changes.txt to reflect reality

pull/254/head
Andy Taylor 2 months ago
parent e11754a4e0
commit c42b927cdb

@ -28,7 +28,6 @@ Files Changed and Security Fixes:
- "class.parsexml.php"
* Added element name sanitization to prevent XML injection
* Added strip_tags() to remove HTML/XML from extracted content
- "class.peer.php"
* Added input validation in constructor for all parameters
@ -47,10 +46,6 @@ Files Changed and Security Fixes:
* Callsign format validation
* Module validation
- "config.inc.php"
* Secured external config file inclusion with path validation
* Added realpath() checks to prevent directory traversal
- "modules.php"
* All output wrapped with sanitize_output() to prevent XSS

Loading…
Cancel
Save

Powered by TurnKey Linux.