Erling Ellingsen 48e0cf8479 Don't send URL in redirect body ...

If you put a CR in the redirect URL, the response splitting protection refuses to send the Location header, and the body is rendered in the browser; instant xss. It would not surprise me if some browsers ignore the Location header for less obviously broken URLs, so let's just remove the URL entirely.

2013-04-25 00:49:58 -07:00

..

array

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

file

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

memory

Remove old HHVM_GC code

2013-04-23 09:52:58 -07:00

server

Don't send URL in redirect body

2013-04-25 00:49:58 -07:00

shared

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

time

Litstr must die, episode III.

2013-04-23 12:57:40 -07:00

util

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

zend

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

base_includes.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

binary_operations.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

bstring.cpp

Replaced NULL with nullptr

2013-02-19 06:57:54 -08:00

bstring.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

builtin_functions.cpp

Add support for safe (un)serialization using (un)serialize()

2013-04-18 13:54:55 -07:00

builtin_functions.ext_hhvm.cpp

Fix some RefData<->TypedValue<->Variant<->Value type puns

2013-03-27 16:52:16 -07:00

builtin_functions.ext_hhvm.h

Code move src/ -> hphp/

2013-02-11 02:10:41 -08:00

builtin_functions.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

class_info.cpp

Rework constants to use the target cache exclusively

2013-04-18 12:19:05 -07:00

class_info.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

code_coverage.cpp

const bool hhvm is dead

2013-03-09 12:49:37 -08:00

code_coverage.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

comparisons.cpp

Eliminate int32, uint32, int16, uint16, int8, uint8.

2013-03-09 10:25:16 -08:00

comparisons.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

compiler_id.h

Put the compiler-id into a variable

2013-03-08 17:52:20 -08:00

complex_types.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

crash_reporter.cpp

Add assert_throw and assert_log

2013-03-18 15:12:16 -07:00

crash_reporter.h

Code move src/ -> hphp/

2013-02-11 02:10:41 -08:00

debuggable.cpp

Eliminate int32, uint32, int16, uint16, int8, uint8.

2013-03-09 10:25:16 -08:00

debuggable.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

execution_context.cpp

Litstr must die, episode III.

2013-04-23 12:57:40 -07:00

execution_context.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

externals.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

hardware_counter.cpp

Litstr must die, episode III.

2013-04-23 12:57:40 -07:00

hardware_counter.h

Eliminate int32, uint32, int16, uint16, int8, uint8.

2013-03-09 10:25:16 -08:00

hphp_system.cpp

Put the compiler-id into a variable

2013-03-08 17:52:20 -08:00

hphp_system.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

hphp_value.cpp

Rename TypedValue._count to m_aux; Variant extends TypedValue.

2013-03-09 15:07:37 -08:00

hphp_value.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

hphp.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

ini_setting.cpp

Eliminate int32, uint32, int16, uint16, int8, uint8.

2013-03-09 10:25:16 -08:00

ini_setting.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

intercept.cpp

const bool hhvm is dead

2013-03-09 12:49:37 -08:00

intercept.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

list_assignment.cpp

Code move src/ -> hphp/

2013-02-11 02:10:41 -08:00

list_assignment.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

macros.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

Makefile

Code move src/ -> hphp/

2013-02-11 02:10:41 -08:00

md5.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

object_data.cpp

Ensure C++ exceptions eventually propagate out of destructors.

2013-04-17 08:54:58 -07:00

object_data.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

preg.cpp

kill TAINTED code

2013-04-12 12:04:04 -07:00

preg.h

Fix some mismatched include guards

2013-04-22 14:43:50 -07:00

program_functions.cpp

Embed systemlib.php into hhvm

2013-04-25 00:49:50 -07:00

program_functions.h

Embed systemlib.php into hhvm

2013-04-25 00:49:50 -07:00

ref_data.cpp

Allow different RefData and TypedValue layouts

2013-04-01 11:51:31 -07:00

ref_data.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

resource_data.cpp

Remove dynamic_table_class.cpp

2013-03-08 08:50:45 -08:00

resource_data.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

runtime_error.cpp

fix double space after notice and warnings

2013-04-01 13:46:30 -07:00

runtime_error.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

runtime_option.cpp

Add support for safe (un)serialization using (un)serialize()

2013-04-18 13:54:55 -07:00

runtime_option.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

sort_flags.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

stat_cache.cpp

Replaced NULL with nullptr

2013-02-19 06:57:54 -08:00

stat_cache.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

string_data.cpp

Fix literal string to int/double conversion under hhir

2013-04-24 12:42:45 -07:00

string_data.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

string_offset.cpp

Code move src/ -> hphp/

2013-02-11 02:10:41 -08:00

string_offset.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

string_util.cpp

change use of html_supported_charset to avoid duplicating work

2013-03-27 16:10:33 -07:00

string_util.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

strings.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

thread_info.cpp

Remove old vestiges of frame injection.

2013-04-23 09:52:57 -07:00

thread_init_fini.cpp

Get rid of more of system/gen

2013-03-07 16:19:03 -08:00

thread_init_fini.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

timeout_thread.cpp

const bool hhvm is dead

2013-03-09 12:49:37 -08:00

timeout_thread.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

tv_helpers.cpp

Fix a bug with boxed static/counted types

2013-04-02 15:01:37 -07:00

tv_helpers.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

type_array.cpp

Lint fixes for type_array.h

2013-04-23 12:59:00 -07:00

type_array.h

Lint fixes for type_array.h

2013-04-23 12:59:00 -07:00

type_conversions.cpp

Code move src/ -> hphp/

2013-02-11 02:10:41 -08:00

type_conversions.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

type_object.cpp

Chip away at ClassInfo::FindClass() and ObjectData cruft

2013-04-01 11:51:31 -07:00

type_object.h

Remove old HHVM_GC code

2013-04-23 09:52:58 -07:00

type_string.cpp

Conversions in IR

2013-04-18 13:55:38 -07:00

type_string.h

Remove old HHVM_GC code

2013-04-23 09:52:58 -07:00

type_variant.cpp

Remove bool key overloads from Array smart pointer

2013-04-23 09:52:58 -07:00

type_variant.h

Lint fixes for type_array.h

2013-04-23 12:59:00 -07:00

types.h

Remove old vestiges of frame injection.

2013-04-23 09:52:57 -07:00

variable_serializer.cpp

More smart containers

2013-04-04 12:20:04 -07:00

variable_serializer.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00

variable_unserializer.cpp

Add support for safe (un)serialization using (un)serialize()

2013-04-18 13:54:55 -07:00

variable_unserializer.h

Fix some cpplint errors about illegal symbols

2013-04-22 14:43:49 -07:00