Thu, 22 Oct 2009 11:07:05 +0200 [javascript] handle cases where vid parameter is hijacked by parameter-injection stable
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 11:07:05 +0200] rev 3784
[javascript] handle cases where vid parameter is hijacked by parameter-injection
Thu, 22 Oct 2009 11:02:50 +0200 [views] consider fallbackvid request parameter in ViewController stable
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 11:02:50 +0200] rev 3783
[views] consider fallbackvid request parameter in ViewController
Thu, 22 Oct 2009 11:01:50 +0200 [cleanup] reorder cubicweb namespace attributes declaration stable
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 11:01:50 +0200] rev 3782
[cleanup] reorder cubicweb namespace attributes declaration
Thu, 22 Oct 2009 09:30:10 +0200 [javascript] asURL now escapes request arguments stable
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Thu, 22 Oct 2009 09:30:10 +0200] rev 3781
[javascript] asURL now escapes request arguments I can't see no good reason for not escaping parameters. The two main locations where asURL is used are : - edition view: here, the change should have no effect - facets: escaping is clearly needed in that case
(0) -3000 -1000 -300 -100 -30 -10 -4 +4 +10 +30 +100 +300 +1000 +3000 tip