projects / mirror / userdir-ldap-cgi.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (from: b33011c)
Various fixes for XSS and bad crypto. No claim to completeness.
authorPeter Palfrader <peter@palfrader.org>
Sat, 3 Jan 2015 12:30:36 +0000 (13:30 +0100)
committerPeter Palfrader <peter@palfrader.org>
Sat, 3 Jan 2015 12:31:10 +0000 (13:31 +0100)
* Fix a XSS reported in
  https://trac.torproject.org/projects/tor/ticket/14037
* Fix horrible use of crypto primitives.
* Add HMAC authentication to authtoken.
* Verify that the uid passed as a get parameters matches the
  one stored in authtoken.


No differences found
Mirror of Debian's userdir-ldap-cgi repository