Re: com web/qa: QA Report : bug fixes and support for xfail view: reports/index.php reports/parserfunc.php reports/test-insert.php
| From: | Alexey Shein | Date: | Sat, 31 Mar 2012 18:06:11 +0000 |
| Subject: | Re: com web/qa: QA Report : bug fixes and support for xfail view: reports/index.php reports/parserfunc.php reports/test-insert.php | ||
| References: | 1 2 3 | Groups: | php.qa |
| Request: | Send a blank email to php-qa+get-66205@lists.php.net to get a copy of this message | ||
31 марта 2012 г. 22:44 пользователь Olivier Doucet <olivier@oxeva.fr>
написал:
> Le 31/03/2012 19:32, Alexey Shein a écrit :
>
>> Isn't that an XSS injection?
>
> There is a sanity check at the top of this page :
>
> if (!is_valid_php_version($_GET['version'], $QA_RELEASES)) {
> exit('invalid version');
> }
>
> Just in case something was missed, I'll change source code to use
> $getVersion instead.
Oh, I missed that, just looked at the diff. Thanks for answering.
--
Regards,
Shein Alexey