9eee2b995b
It is really fix the XSS problem. Version 2.10.2 (2011-10-10) --------------------------- - Updated: updated TinyMCE to version 3.4.6 - Fixed: do not remove slashes just because get_magic_quotes_gpc() exists - Fixed: CSS units were not always applied when used with global variables (#3464) - Fixed: the task deadline field did not show the date picker (#3351) - Fixed: do not return empty lines in the compileDefinition hook (#3440) - Fixed: the TinyMCE spellchecker did not work anymore (#3487) - Fixed: the regexp for validating phone numbers accepted invalid values (#3493) - Fixed: added the new HTML5 elements to the valid TinyMCE tags (#3479) - Fixed: the style sheet generator did not support absolute URLs (#3512) - Fixed: fixed a potential XSS vulnerability (thanks to sschurtz) - Fixed a few minor issues |
||
|---|---|---|
| .. | ||
| DEINSTALL | ||
| DESCR | ||
| distinfo | ||
| INSTALL | ||
| Makefile | ||
| MESSAGE | ||
| PLIST | ||