[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-directory-commits
Subject:    [Fedora-directory-commits] dsgw/tests/search testget.1, NONE,
From:       "Richard Allen Megginson" (rmeggins)
Date:       2008-02-27 3:36:57
Message-ID: 200802270336.m1R3avDN031030 () cvs-int ! fedora ! redhat ! com
[Download RAW message or body]

Author: rmeggins

Update of /cvs/dirsec/dsgw/tests/search
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv30811/dsgw/tests/search

Added Files:
	testget.1 testget.2 
Log Message:
1) There were several places where DSGW would output and eval arbitrary javascript \
code passed in a CGI parameter.  These have been replaced with resource strings.  In \
all cases the values were output escaped, but still, we shouldn't be passing around \
bits of javascript code to execute. 2) ICU provides a function which can parse the \
HTTP_ACCEPT_LANGUAGE string and return the most appropriate locale, so we should use \
that for date calculation. 3) Found a couple of places where uninitialized values \
could be used, and fixed them. 4) Used PR_smprintf to simplify some \
strlen+malloc+strcpy+strcat code. 5) dsgw_get_cgi_var will check for NULL input
6) Do not pass in the ldap host and port in form parameters.  Always just use the \
values from the config file. 7) Added many new tests and valgrind suppressions \
(almost all from ICU)



--- NEW FILE testget.1 ---


--- NEW FILE testget.2 ---
file=string

--
Fedora-directory-commits mailing list
Fedora-directory-commits@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-commits


[prev in list] [next in list] [prev in thread] [next in thread]