| .. |
|
add
|
htmlentities() for token
|
2021-07-27 22:01:10 +03:00 |
|
api
|
Restrict v-make-tmp-file to tmp folder
|
2021-07-27 14:42:25 +03:00 |
|
bulk
|
WEB. Replaced split with explode. This closed #878
|
2016-10-20 09:37:41 -04:00 |
|
css
|
WEB. File Manager, positioning hotkeys popup at the middle of the screen
|
2016-12-02 09:33:55 -05:00 |
|
delete
|
Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.
|
2019-04-21 00:11:36 +02:00 |
|
download
|
Fix for downloading backup of other users
|
2021-07-27 21:50:33 +03:00 |
|
edit
|
Adding escapeshellarg on few more places in php code
|
2020-06-23 19:06:25 +02:00 |
|
error
|
replaces start page with main page
|
2014-10-05 14:43:11 +03:00 |
|
file_manager
|
setting content type to fix possible XSS attack vector
|
2019-04-12 17:21:28 +03:00 |
|
generate/ssl
|
Challenging routing on render_page
|
2016-07-02 21:40:46 +09:00 |
|
images
|
Merge pull request #768 from PeterDaveHello/image-optimize
|
2016-09-05 16:34:57 +03:00 |
|
inc
|
Update cn.php
|
2020-09-03 12:49:00 -07:00 |
|
js
|
enable/disable softaculous plugin
|
2017-12-21 12:19:01 +02:00 |
|
list
|
Checking period value in /list/rrd/
|
2021-07-27 22:19:45 +03:00 |
|
login
|
Preventing admin to do loginas action without token
|
2021-07-27 20:58:34 +03:00 |
|
logout
|
Replaced CRLF by LF again
|
2013-01-19 23:57:58 +04:00 |
|
reset
|
Adding port to reset password link
|
2020-03-29 18:13:22 +02:00 |
|
restart
|
Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.
|
2019-04-21 00:11:36 +02:00 |
|
schedule
|
Revert "[SECURITY] Fix OS command injection."
|
2015-12-11 21:14:49 +02:00 |
|
search
|
Challenging routing on render_page
|
2016-07-02 21:40:46 +09:00 |
|
start/service
|
Revert "[SECURITY] Fix OS command injection."
|
2015-12-11 21:14:49 +02:00 |
|
stop/service
|
Update index.php
|
2017-03-04 22:45:02 +00:00 |
|
suspend
|
Revert "[SECURITY] Fix OS command injection."
|
2015-12-11 21:14:49 +02:00 |
|
templates
|
Ensure HTML will not be displayed in list log page
|
2021-07-26 17:08:17 +03:00 |
|
unsuspend
|
Revert "[SECURITY] Fix OS command injection."
|
2015-12-11 21:14:49 +02:00 |
|
update/vesta
|
Add the validation of the CSRF token. It is missing in some cases when it is sent by GET or POST.
|
2019-04-21 00:11:36 +02:00 |
|
upload
|
Preventing uploads from other origin
|
2021-07-27 14:56:35 +03:00 |
|
view/file
|
Additional rXSS fix / closes #1558
|
2018-05-16 17:23:04 +03:00 |
|
favicon.ico
|
favicon update
|
2016-08-30 16:27:42 +03:00 |
|
hotkeys.html
|
ketboard shortcuts for vesta control panel
|
2015-09-14 17:06:34 +03:00 |
|
index.php
|
Merge pull request #422 from SysVoid/patch-1
|
2015-10-22 16:56:26 +03:00 |
|
robots.txt
|
added robots.txt which pervents indexing by search engines
|
2016-12-16 02:50:33 +03:00 |
