Tue, 12 Jul 2011 22:13:37 -0400 | Dan Fuhry | SECURITY: Fixed several XSS vulns reported by Secunia, mostly in Private Messaging. Also backported CSRF protection API from 1.1.x, and protected Private Messaging and logout functions. | changeset | files |
Tue, 16 Nov 2010 12:44:22 -0500 | Dan Fuhry | Retagged current-stable | changeset | files |
Tue, 16 Nov 2010 12:43:24 -0500 | Dan Fuhry | Tagged release: 1.0.6pl3 | changeset | files |
Tue, 16 Nov 2010 12:42:36 -0500 | Dan Fuhry | Version bump to 1.0.6pl3 (the real release number) | changeset | files |
Tue, 16 Nov 2010 12:20:50 -0500 | Dan Fuhry | Version bump to 1.0.6pl2 | changeset | files |
Tue, 16 Nov 2010 12:19:13 -0500 | Dan Fuhry | SECURITY: Fix SQL injection in banlist check | changeset | files |
Mon, 28 Jun 2010 11:11:09 -0400 | Dan Fuhry | Tagged release: 1.0.6pl2 | changeset | files |
Mon, 28 Jun 2010 11:00:51 -0400 | Dan Fuhry | SECURITY: Multiple XSS in Special:ChangeStyle. Reported by Mesut Timur of Mavituna Security - thanks! | changeset | files |