3 matches found
Silverstripe HtmlEditor embed url sanitisation
"Add from URL" doesn't clearly sanitise URL server side HtmlEditorFieldToolbar has an action HtmlEditorFieldToolbarviewfile, which gets called by the CMS when adding a media "from a URL" i.e. via oembed. This action gets the URL to add in the GET parameter FileURL. However it doesn't do any URL...
auth only works well with external functions
Handle gpersoon Vulnerability details Impact The auth modifier of AccessControl.sol doesn't work as you would expect. It checks if you are authorized for "msg.sig", however msg.sig is the signature of the first function you have called, not of the current function. So if you call function A, whic...
The unofficial guide to Facebook privacy !
To fully understand the privacy of Facebook and how it's likely to evolve, you need to understand one thing - Facebook executives want everyone to be public. As the service evolves, executives tend to favor our open access to information, meaning information you think is private will slowly becom...