head	1.2;
access;
symbols
	pkgsrc-2015Q1:1.1.0.2;
locks; strict;
comment	@# @;


1.2
date	2015.06.13.14.37.56;	author taca;	state dead;
branches;
next	1.1;
commitid	MyY9MK0UKN1Zihpy;

1.1
date	2015.06.06.03.31.01;	author taca;	state Exp;
branches
	1.1.2.1;
next	;
commitid	ENKP3CzDD1oXPjoy;

1.1.2.1
date	2015.06.06.03.31.01;	author tron;	state dead;
branches;
next	1.1.2.2;
commitid	bMVwRDgUpRaW1cpy;

1.1.2.2
date	2015.06.12.22.44.26;	author tron;	state Exp;
branches;
next	;
commitid	bMVwRDgUpRaW1cpy;


desc
@@


1.2
log
@Remove contao34,  it reached EOL by release of contao 3.5.0.
@
text
@$NetBSD: patch-system_modules_core_controllers_BackendPopup.php,v 1.1 2015/06/06 03:31:01 taca Exp $

Security improvement as Contao 3.2.21.

--- system/modules/core/controllers/BackendPopup.php.orig	2015-03-27 08:53:59.000000000 +0000
+++ system/modules/core/controllers/BackendPopup.php
@@@@ -128,7 +128,7 @@@@ class BackendPopup extends \Backend
 		$this->Template->ctime = \Date::parse(\Config::get('datimFormat'), $objFile->ctime);
 		$this->Template->mtime = \Date::parse(\Config::get('datimFormat'), $objFile->mtime);
 		$this->Template->atime = \Date::parse(\Config::get('datimFormat'), $objFile->atime);
-		$this->Template->path = $this->strFile;
+		$this->Template->path = specialchars($this->strFile);
 
 		$this->output();
 	}
@


1.1
log
@Add several security related fixes from Contao 3.2.21.

Bump PKGREVISION.
@
text
@d1 1
a1 1
$NetBSD$
@


1.1.2.1
log
@file patch-system_modules_core_controllers_BackendPopup.php was added on branch pkgsrc-2015Q1 on 2015-06-12 22:44:26 +0000
@
text
@d1 15
@


1.1.2.2
log
@Pullup ticket #4740 - requested by taca
www/contao34: security patch

Revisions pulled up:
- www/contao34/Makefile                                         1.5
- www/contao34/distinfo                                         1.6
- www/contao34/patches/patch-system_helper_functions.php        1.1
- www/contao34/patches/patch-system_modules_core_classes_BackendUser.php 1.1
- www/contao34/patches/patch-system_modules_core_controllers_BackendPopup.php 1.1
- www/contao34/patches/patch-system_modules_core_dca_tl__files.php 1.1

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Sat Jun  6 03:31:01 UTC 2015

   Modified Files:
   	pkgsrc/www/contao34: Makefile distinfo
   Added Files:
   	pkgsrc/www/contao34/patches: patch-system_helper_functions.php
   	    patch-system_modules_core_classes_BackendUser.php
   	    patch-system_modules_core_controllers_BackendPopup.php
   	    patch-system_modules_core_dca_tl__files.php

   Log Message:
   Add several security related fixes from Contao 3.2.21.

   Bump PKGREVISION.
@
text
@a0 15
$NetBSD$

Security improvement as Contao 3.2.21.

--- system/modules/core/controllers/BackendPopup.php.orig	2015-03-27 08:53:59.000000000 +0000
+++ system/modules/core/controllers/BackendPopup.php
@@@@ -128,7 +128,7 @@@@ class BackendPopup extends \Backend
 		$this->Template->ctime = \Date::parse(\Config::get('datimFormat'), $objFile->ctime);
 		$this->Template->mtime = \Date::parse(\Config::get('datimFormat'), $objFile->mtime);
 		$this->Template->atime = \Date::parse(\Config::get('datimFormat'), $objFile->atime);
-		$this->Template->path = $this->strFile;
+		$this->Template->path = specialchars($this->strFile);
 
 		$this->output();
 	}
@