This is a static dump of issues in the old "Flyspray" bugtracker for DokuWiki. Bugs and feature requests are now tracked at the
issue tracker at Github
.
Closed
Fixed
FS#2577 fix remaining missing $INPUT uses
Security
2012-08-05
andi
As discussed in
http://www.freelists.org/post/dokuwiki/Fwd-DokuWiki-Full-path-disclosure,3
all input variables should be access through our $INPUT wrapper.
There are still some variables left. Listed at
https://docs.google.com/spreadsheet/ccc?key=0AsrTBbNk9K0udFpRTzZNUG5Ga3ZnNVFYSEtLZ2NwakE
2012-09-10
bug
Andi, do you update your googledoc spreadsheet? It's hard to know where we are with this issue (completeness).
2012-09-10
ach
I suspect the spreadsheet is up-to-date. At least HÃ¥kan updated it when he changed some on the bug hunting day.
2013-02-16
andi
the spreadsheet is not uptodate. Grepping the code for _REQUEST, _POST and _GET is the way to go.
2013-02-20
Michitux
Fixed in
00d58927
Related tasks:
FS#2584 Bug on search - URL parameters