Age | Commit message (Collapse) | Author | |
---|---|---|---|
2011-02-22 | inets: prevent XSS in error pages | Michael Santos | |
Prevent user controlled input from being interpreted as HTML in error pages by encoding the reserved HTML characters. The reserved character set should be safe for displaying data within the body of HTML pages as outlined here: http://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet Previously, weird URLs were URI encoded in the error page. This worked quite well but the URL would be displayed in the HTML in percent encoded format. There was also a check for URIs that were already escaped (by the browser) that would fail if the browser sent an URI containing a "%", e.g.: w3m "http://localhost:8080/<b>foo</b>?%" Also encode the HTTP method and version, since it's possible they may be manipulated: <b>FOO</b> /index.html HTTP/1.0 GET /index.html <b>foo</b>/1.0 Encode the static messages to prevent characters from being interpreted as HTML such as "heavy load (>~w processes)". | |||
2011-02-18 | Merge branch 'mh/file-fix_spec' into dev | Niclas Axelsson | |
* mh/file-fix_spec: Fix -spec for file:write_file/3 OTP-9067 | |||
2011-02-18 | Merge branch 'sverker/ets_halfword_highmem/OTP-8941' into dev | Sverker Eriksson | |
* sverker/ets_halfword_highmem/OTP-8941: HALFWORD ETS Fix copyright year in some source files Fix vm crash in kernel test case seq_trace_SUITE:call remove NIF compile warning: no previous prototype for ‘nif_init’ Refuse to load NIF library on wrong VM variant (halfword/fullword) HALFWORD ETS match spec heap fragment optimization HALFWORD ETS removed eheap and improved test case t_match_spec_run HALFWORD ETS Further match spec optimization to minimize copying and garbage HALFWORD ETS db_prog_match optimization HALFWORD ETS Fix segv for match spec with several function and guards HALFWORD Make system_info mseg_alloc report both low/high mem HALFWORD Fix segv caused by erlang:halt HALFWORD Make more allocators use high mem (binary, fixed and driver) HALFWORD ETS 32-bit arch fixes and other cleanups HALFWORD ETS nicer update_element HALFWORD ETS Real matching on relative terms HALFWORD first stab at high mem alloc HALFWORD ETS relative terms Conflicts: erts/emulator/test/driver_SUITE.erl | |||
2011-02-18 | Merge branch 'jp/dependencies_makefile' into dev | Björn Gustavsson | |
* jp/dependencies_makefile: Add dependencies Makefile generation to erlc(1) and compile(3) Conflicts: lib/compiler/test/compile_SUITE.erl OTP-9065 | |||
2011-02-18 | Add dependencies Makefile generation to erlc(1) and compile(3) | Jean-Sébastien Pédron | |
This is useful when a project is built with Makefiles and erlc(1) instead of EMakefiles. Tracking dependencies by hand is error-prone and it becomes painful when using external application headers like EUnit's one. A dependencies Makefile will look like this: module.beam: module.erl \ /usr/local/lib/erlang/lib/eunit-2.1.4/include/eunit.hrl \ header.hrl When included in the main Makefile, 'module' will be recompiled only when needed. GCC offers the same feature and new erlc(1) options are compatible with it. More informations at: http://wiki.github.com/dumbbell/otp/dependencies-makefile | |||
2011-02-17 | Update ipv6 testcase to be skipped if no ipv6 hosts are defined | Lukas Larsson | |
2011-02-17 | Update ftp suite to take config from ct:get_config | Lukas Larsson | |
2011-02-17 | Update gethostname test cases for v6 to use the v6 hosts instead of v4 | Lukas Larsson | |
2011-02-17 | Rename Suite Callback to Common Test Hook | Lukas Larsson | |
2011-02-17 | Strip ts.config of internal addresses. | Lukas Larsson | |
2011-02-17 | Update ssl orber tests to be skipped if there is no ssl installed | Lukas Larsson | |
2011-02-17 | Update init_per_suite to skip all tests if crypto does not exist | Lukas Larsson | |
2011-02-17 | Update so that count_children_memory is skipped on +Meamin emulators | Lukas Larsson | |
2011-02-17 | Update so that tests are skipped if odbc:connect fails | Lukas Larsson | |
2011-02-17 | Update init_per_testcase to kill all slaves when called. | Lukas Larsson | |
This is to prevent testcases which fail to before to chain with the ones run after. | |||
2011-02-17 | Update and add cover spec files to work with common_test | Lukas Larsson | |
2011-02-17 | Update all test specs | Lukas Larsson | |
2011-02-17 | Fix formatting for wx | Lukas Larsson | |
2011-02-17 | Fix formatting for tools | Lukas Larsson | |
2011-02-17 | Fix formatting for syntax_tools | Lukas Larsson | |
2011-02-17 | Fix formatting for stdlib | Lukas Larsson | |
2011-02-17 | Fix formatting for ssl | Lukas Larsson | |
2011-02-17 | Fix formatting for runtime_tools | Lukas Larsson | |
2011-02-17 | Fix formatting for reltool | Lukas Larsson | |
2011-02-17 | Fix formatting for public_key | Lukas Larsson | |
2011-02-17 | Fix formatting for percept | Lukas Larsson | |
2011-02-17 | Fix formatting for parsetools | Lukas Larsson | |
2011-02-17 | Fix formatting for os_mon | Lukas Larsson | |
2011-02-17 | Fix formatting for orber | Lukas Larsson | |
2011-02-17 | Fix formatting for odbc | Lukas Larsson | |
2011-02-17 | Fix formatting for observer | Lukas Larsson | |
2011-02-17 | Fix formatting for mnesia | Lukas Larsson | |
2011-02-17 | Fix formatting and also some migration fixes for megaco | Lukas Larsson | |
2011-02-17 | Fix formatting for kernel | Lukas Larsson | |
2011-02-17 | Fix formatting for jinterface | Lukas Larsson | |
2011-02-17 | Fix formatting for invision | Lukas Larsson | |
2011-02-17 | Fix formatting for inets | Lukas Larsson | |
2011-02-17 | Fix formatting for ic | Lukas Larsson | |
2011-02-17 | Fix formatting for eunit | Lukas Larsson | |
2011-02-17 | Fix formatting for et | Lukas Larsson | |
2011-02-17 | Fix formatting for erl_interface | Lukas Larsson | |
2011-02-17 | Fix formatting for edoc | Lukas Larsson | |
2011-02-17 | Fix formatting and also some migration fixes for debugger | Lukas Larsson | |
2011-02-17 | Fix formatting for cosProperty | Lukas Larsson | |
2011-02-17 | Fix formatting for cosNotification | Lukas Larsson | |
2011-02-17 | Fix formatting for cosFileTransfer | Lukas Larsson | |
2011-02-17 | Fix formatting for cosTransactions | Lukas Larsson | |
2011-02-17 | Fix formatting for cosTime | Lukas Larsson | |
2011-02-17 | Fix formatting for cosEventDomain | Lukas Larsson | |
2011-02-17 | Fix formatting for cosEvent | Lukas Larsson | |