Startseite Erkunden Hilfe
Anmelden
computer_glamour
/
privatebin-mirror
Mirror von https://github.com/PrivateBin/PrivateBin
1
0
Fork 0
Dateien Issues 0 Wiki
Struktur: ebc2d649c4
Branches Tags
privatebin-mirr...
/
test.diff

test.diff 3.6 KB
Verlauf Originalformat

12345678910111213141516171819202122232425262728293031323334353637383940 
  1. diff --git a/js/privatebin.js b/js/privatebin.js
    2. 

  2. index c83d8ff..5c0aecc 100644
    3. 

  3. --- a/js/privatebin.js
    4. 

  4. +++ b/js/privatebin.js
    5. 

  5. @@ -620,6 +620,9 @@ jQuery.PrivateBin = (function($, RawDeflate) {
    6. 

  6.  
    7. 

  7.              // messageID may contain links, but only the first parameter, as that is from a trusted source (code or translation JSON files)
    8. 

  8.              let containsLinks = args[0].indexOf('<a') !== -1;
    9. 

  9. +            if (containsLinks && args.length > 0) {
    10. 

  10. +                throw new Error('security violation detected: do not concatenate links and untrusted data!');
    11. 

  11. +            }
    12. 

  12.  
    13. 

  13.              // format string
    14. 

  14.              let output = Helper.sprintf.apply(this, args);
    15. 

  15. diff --git a/tpl/bootstrap.php b/tpl/bootstrap.php
    16. 

  16. index 59c730e..0e949da 100644
    17. 

  17. --- a/tpl/bootstrap.php
    18. 

  18. +++ b/tpl/bootstrap.php
    19. 

  19. @@ -72,7 +72,7 @@ endif;
    20. 

  20.  ?>
    21. 

  21.  		<script type="text/javascript" data-cfasync="false" src="js/purify-2.0.7.js" integrity="sha512-XjNEK1xwh7SJ/7FouwV4VZcGW9cMySL3SwNpXgrURLBcXXQYtZdqhGoNdEwx9vwLvFjUGDQVNgpOrTsXlSTiQg==" crossorigin="anonymous"></script>
    22. 

  22.  		<script type="text/javascript" data-cfasync="false" src="js/legacy.js?<?php echo rawurlencode($VERSION); ?>" integrity="sha512-LYos+qXHIRqFf5ZPNphvtTB0cgzHUizu2wwcOwcwz/VIpRv9lpcBgPYz4uq6jx0INwCAj6Fbnl5HoKiLufS2jg==" crossorigin="anonymous"></script>
    23. 

  23. -		<script type="text/javascript" data-cfasync="false" src="js/privatebin.js?<?php echo rawurlencode($VERSION); ?>" integrity="sha512-/d5+ju4pY94Jnb3o2poZNQRxKxJqgmbV4SojFKq/4Gzyz7ft99ptmhwho7pvSVggoh0xlOR3d8EV+sEr3gDxTA==" crossorigin="anonymous"></script>
    24. 

  24. +		<script type="text/javascript" data-cfasync="false" src="js/privatebin.js?<?php echo rawurlencode($VERSION); ?>" integrity="sha512-NQ2iciSmIAeXCmdpJm5BGKvyGjkvN0Ob82mmbxSpgBpJpLypKZEQksbkIti+dyQ3XVjXIGyi9yiLxEgvpzG3hw==" crossorigin="anonymous"></script>
    25. 

  25.  		<link rel="apple-touch-icon" href="img/apple-touch-icon.png?<?php echo rawurlencode($VERSION); ?>" sizes="180x180" />
    26. 

  26.  		<link rel="icon" type="image/png" href="img/favicon-32x32.png?<?php echo rawurlencode($VERSION); ?>" sizes="32x32" />
    27. 

  27.  		<link rel="icon" type="image/png" href="img/favicon-16x16.png?<?php echo rawurlencode($VERSION); ?>" sizes="16x16" />
    28. 

  28. diff --git a/tpl/page.php b/tpl/page.php
    29. 

  29. index 0f8df18..ff2d5f5 100644
    30. 

  30. --- a/tpl/page.php
    31. 

  31. +++ b/tpl/page.php
    32. 

  32. @@ -50,7 +50,7 @@ endif;
    33. 

  33.  ?>
    34. 

  34.  		<script type="text/javascript" data-cfasync="false" src="js/purify-2.0.7.js" integrity="sha512-XjNEK1xwh7SJ/7FouwV4VZcGW9cMySL3SwNpXgrURLBcXXQYtZdqhGoNdEwx9vwLvFjUGDQVNgpOrTsXlSTiQg==" crossorigin="anonymous"></script>
    35. 

  35.  		<script type="text/javascript" data-cfasync="false" src="js/legacy.js?<?php echo rawurlencode($VERSION); ?>" integrity="sha512-LYos+qXHIRqFf5ZPNphvtTB0cgzHUizu2wwcOwcwz/VIpRv9lpcBgPYz4uq6jx0INwCAj6Fbnl5HoKiLufS2jg==" crossorigin="anonymous"></script>
    36. 

  36. -		<script type="text/javascript" data-cfasync="false" src="js/privatebin.js?<?php echo rawurlencode($VERSION); ?>" integrity="sha512-/d5+ju4pY94Jnb3o2poZNQRxKxJqgmbV4SojFKq/4Gzyz7ft99ptmhwho7pvSVggoh0xlOR3d8EV+sEr3gDxTA==" crossorigin="anonymous"></script>
    37. 

  37. +		<script type="text/javascript" data-cfasync="false" src="js/privatebin.js?<?php echo rawurlencode($VERSION); ?>" integrity="sha512-NQ2iciSmIAeXCmdpJm5BGKvyGjkvN0Ob82mmbxSpgBpJpLypKZEQksbkIti+dyQ3XVjXIGyi9yiLxEgvpzG3hw==" crossorigin="anonymous"></script>
    38. 

  38.  		<link rel="apple-touch-icon" href="img/apple-touch-icon.png?<?php echo rawurlencode($VERSION); ?>" sizes="180x180" />
    39. 

  39.  		<link rel="icon" type="image/png" href="img/favicon-32x32.png?<?php echo rawurlencode($VERSION); ?>" sizes="32x32" />
    40. 

  40.  		<link rel="icon" type="image/png" href="img/favicon-16x16.png?<?php echo rawurlencode($VERSION); ?>" sizes="16x16" />
    41.