Context Navigation

← Previous Changeset
Next Changeset →

Changeset 45981 in spip-zone

Timestamp:

Mar 27, 2011, 2:23:46 AM (10 years ago)

Author:

gilles.vincent@…

Message:

svn: Protection contre une attaque XSS en appliquant le patch de SPIP 2.1.9
detaille ici : http://www.spip-blog.net/SPIP-2-1-9.html

N'ayant pas compris la subtilite de l'attaque possible, j'ai aussi modifie
quelques pages 401 qui me semblaient suspectes (dont celle de zpip).
Est-ce un exces de zele, ou une idiotie finie ?

@ suivre

Location:

_squelettes_

Files:

: 31 edited

Durzy/_1_9_2/squelettes/404.html (modified) (1 diff)
Durzy/_1_9_3_Dev/squelettes/404.html (modified) (1 diff)
Durzy/_2_0_0/404.html (modified) (1 diff)
IENSP/iensp-x/404.html (modified) (1 diff)
IENSP/iensp-x_ImageFlow/404.html (modified) (1 diff)
IENSP/iensp-x_vPP/404.html (modified) (1 diff)
IENSP/iensp-x_vPP_ImageFlow/404.html (modified) (1 diff)
IENSP/iensp_ac/404.html (modified) (1 diff)
IENSP/iensp_vPP-MH/404.html (modified) (1 diff)
IENSP/iensp_vPP-MH_ImageFlow/404.html (modified) (1 diff)
RevueLigne/404.html (modified) (1 diff)
alter/alternatives/404.html (modified) (1 diff)
annu/404.html (modified) (1 diff)
blognglop2/404.html (modified) (1 diff)
bones/dotspip/version_1.9/404.html (modified) (1 diff)
bones/margaritas/404.html (modified) (1 diff)
cheznous/404.html (modified) (1 diff)
demo_generalisation_1/plugins/squelette_general/404.html (modified) (1 diff)
ecolo1070/404.html (modified) (1 diff)
egt/404.html (modified) (1 diff)
lebanon/404.html (modified) (1 diff)
oswd/3626_multiflex-3/noisettes/404/centre.html (modified) (1 diff)
soyezcreateurs_net/plugins_2.0/plugins/__soyezcreateurs/404.html (modified) (1 diff)
soyezcreateurs_net/plugins_2.1_Z/plugins/soyezcreateurs_4/contenu/404.html (modified) (1 diff)
taurillon/404.html (modified) (1 diff)
techno_blog/404.html (modified) (1 diff)
the_morning_after_Z/contenu/page-404.html (modified) (1 diff)
z-dist/content/401.html (modified) (1 diff)
z-dist/content/404.html (modified) (1 diff)
zesty/pages/contenu/404.html (modified) (1 diff)
zpip/contenu/page-401.html (modified) (1 diff)

Legend:

: Unmodified
: Added
: Removed

_squelettes_/Durzy/_1_9_2/squelettes/404.html

r15328	r45981
30	30	<div class="cadre-titre-article">
31	31	<div class="titre-rubrique" style="text-align:center">
32		[(#ENV*{erreur}\|propre) ]
	32	[(#ENV{erreur}) ]
33	33	<div class="espace"></div>
34	34	<img src="#CHEMIN{images/404-erreur.png}" border="0" alt="" />

_squelettes_/Durzy/_1_9_3_Dev/squelettes/404.html

r13253	r45981
30	30	<div class="cadre-titre-article">
31	31	<div class="titre-rubrique" style="text-align:center">
32		[(#ENV*{erreur}\|propre) ]
	32	[(#ENV{erreur}) ]
33	33	<div class="espace"></div>
34	34	<img src="#CHEMIN{images/404-erreur.png}" border="0" alt="" />

_squelettes_/Durzy/_2_0_0/404.html

r28270	r45981
30	30	<div class="cadre-titre-article">
31	31	<div class="titre-rubrique" style="text-align:center">
32		[(#ENV*{erreur}\|propre) ]
	32	[(#ENV{erreur}) ]
33	33	<div class="espace"></div>
34	34	<img src="#CHEMIN{images/404-erreur.png}" border="0" alt="" />

_squelettes_/IENSP/iensp-x/404.html

r44244	r45981
26	26	<h1 class="titre"><:pass_erreur:> 404</h1>
27	27	</div>
28		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	28	[<div class="chapo">(#ENV{erreur})</div>]
29	29
30	30	</div><!-- fin contenu -->

_squelettes_/IENSP/iensp-x_ImageFlow/404.html

r44244	r45981
26	26	<h1 class="titre"><:pass_erreur:> 404</h1>
27	27	</div>
28		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	28	[<div class="chapo">(#ENV{erreur})</div>]
29	29
30	30	</div><!-- fin contenu -->

_squelettes_/IENSP/iensp-x_vPP/404.html

r44244	r45981
26	26	<h1 class="titre"><:pass_erreur:> 404</h1>
27	27	</div>
28		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	28	[<div class="chapo">(#ENV{erreur})</div>]
29	29
30	30	</div><!-- fin contenu -->

_squelettes_/IENSP/iensp-x_vPP_ImageFlow/404.html

r44244	r45981
26	26	<h1 class="titre"><:pass_erreur:> 404</h1>
27	27	</div>
28		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	28	[<div class="chapo">(#ENV{erreur})</div>]
29	29
30	30	</div><!-- fin contenu -->

_squelettes_/IENSP/iensp_ac/404.html

r44831	r45981
37	37	<h1 class="titre"><:pass_erreur:> 404</h1>
38	38	</div>
39		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	39	[<div class="chapo">(#ENV{erreur})</div>]
40	40
41	41	<br class="nettoyeur" />

_squelettes_/IENSP/iensp_vPP-MH/404.html

r44244	r45981
26	26	<h1 class="titre"><:pass_erreur:> 404</h1>
27	27	</div>
28		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	28	[<div class="chapo">(#ENV{erreur})</div>]
29	29
30	30	</div><!-- fin contenu -->

_squelettes_/IENSP/iensp_vPP-MH_ImageFlow/404.html

r44244	r45981
26	26	<h1 class="titre"><:pass_erreur:> 404</h1>
27	27	</div>
28		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	28	[<div class="chapo">(#ENV{erreur})</div>]
29	29
30	30	</div><!-- fin contenu -->

_squelettes_/RevueLigne/404.html

r40543	r45981
23	23	<h1><:pass_erreur:> 404</h1>
24	24	</div>
25		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	25	[<div class="chapo">(#ENV{erreur})</div>]
26	26
27	27	</div><!--#contenu-->

_squelettes_/alter/alternatives/404.html

r7470	r45981
29	29	<h1 class="titre-article"><:pass_erreur:> 404</h1>
30	30	<h2><:info_erreur_requete:> <:avis_aucun_resultat:></h2>
31		[<p>(#ENV*{erreur}\|propre)</p>]
	31	[<p>(#ENV{erreur})</p>]
32	32	</div><!-- cartouche -->
33	33	<div class="chapo">

_squelettes_/annu/404.html

r2774	r45981
21	21	<div id="post">
22	22	<h1><:pass_erreur:> 404</h1>
23		[<p>(#ENV*{erreur}\|propre)</p>]
	23	[<p>(#ENV{erreur})</p>]
24	24	<p><:aucun_article:></p>
25	25	<ul>

_squelettes_/blognglop2/404.html

r31923	r45981
23	23	<div class="cartouche">
24	24	<h1><:pass_erreur:> 404</h1>
25		[<p class="soustitre">(#ENV*{erreur}\|propre)</p>]
	25	[<p class="soustitre">(#ENV{erreur})</p>]
26	26	</div>
27	27

_squelettes_/bones/dotspip/version_1.9/404.html

r12324	r45981
29	29	404</h2>
30	30	[
31		<p>(#ENV*{erreur}\|propre)</p>
	31	<p>(#ENV{erreur})</p>
32	32	] </div>
33	33	</div>

_squelettes_/bones/margaritas/404.html

r6061	r45981
17	17	<h3 class="posth3"><:pass_erreur:> 404</h3>
18	18	[
19		<p class="postdata">(#ENV*{erreur}\|propre)</p>
	19	<p class="postdata">(#ENV{erreur})</p>
20	20	] </div>
21	21	<div class="postsnav">#FORMULAIRE_RECHERCHE</div>

_squelettes_/cheznous/404.html

r26915	r45981
14	14	<h1 class="big"><:pass_erreur:> 404</h1>
15	15	<div class="chapo">
16		[<p>(#ENV*{erreur}\|propre\|PtoBR).</p>]
	16	[<p>(#ENV{erreur}\|PtoBR).</p>]
17	17	<p class="reponse_formulaire">La page que vous avez demandée n'existe pas.</p>
18	18	</div>

_squelettes_/demo_generalisation_1/plugins/squelette_general/404.html

r16597	r45981
14	14
15	15	<div class="chapo"><h3>Cette page n'existe pas</h3></div>
16		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	16	[<div class="chapo">(#ENV{erreur})</div>]
17	17
18	18	</div>

_squelettes_/ecolo1070/404.html

r38557	r45981
66	66	<h1 class="titre"><:pass_erreur:> 404</h1>
67	67
68		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	68	[<div class="chapo">(#ENV{erreur})</div>]
69	69
70	70	</div>

_squelettes_/egt/404.html

r31562	r45981
27	27	<div id="centre">
28	28	<h1><:pass_erreur:> [(#ENV{code, 404}\|intval)]</h1>
29		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	29	[<div class="chapo">(#ENV{erreur})</div>]
30	30	<a href="#URL_SITE_SPIP"><:accueil_site:></a>
31	31	</div> <!-- fin div centre -->

_squelettes_/lebanon/404.html

r5306	r45981
20	20	<h1 class="titre"><:pass_erreur:> 404</h1>
21	21	</div>
22		[<div class="reponse_formulaire">(#ENV*{erreur}\|propre)</div>]
	22	[<div class="reponse_formulaire">(#ENV{erreur})</div>]
23	23
24	24	</div><!-- fin contenu -->

_squelettes_/oswd/3626_multiflex-3/noisettes/404/centre.html

r17369	r45981
1	1	<h1 class="pagetitle"><:pass_erreur:> 404</h1>
2	2
3		[<div>(#ENV*{erreur}\|propre)</div>]
	3	[<div>(#ENV{erreur})</div>]

_squelettes_/soyezcreateurs_net/plugins_2.0/plugins/__soyezcreateurs/404.html

r32656	r45981
24	24	</div>
25	25
26		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	26	[<div class="chapo">(#ENV{erreur})</div>]
27	27
28	28	[(#INCLURE{fond=noisettes/plan}{lang})]

_squelettes_/soyezcreateurs_net/plugins_2.1_Z/plugins/soyezcreateurs_4/contenu/404.html

r39406	r45981
14	14	</div>
15	15
16		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	16	[<div class="chapo">(#ENV{erreur})</div>]
17	17
18	18	[(#INCLURE{fond=noisettes/plan,lang})]

_squelettes_/taurillon/404.html

r18714	r45981
28	28	<div id="contenu">
29	29
30		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	30	[<div class="chapo">(#ENV{erreur})</div>]
31	31
32	32	</div><!-- fin contenu -->

_squelettes_/techno_blog/404.html

r5558	r45981
92	92	<br />
93	93
94		[<p>(#ENV*{erreur}\|propre)</p>]
	94	[<p>(#ENV{erreur})</p>]
95	95
96	96	<br />

_squelettes_/the_morning_after_Z/contenu/page-404.html

r32831	r45981
6	6	<h1 class="h1"><:pass_erreur:> 404</h1>
7	7	</div>
8		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	8	[<div class="chapo">(#ENV{erreur})</div>]

_squelettes_/z-dist/content/401.html

r44605	r45981
6	6	<h1 class="h1"><:pass_erreur:>[ (#ENV{status})]</h1>
7	7	</div>
8		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	8	[<div class="chapo">(#ENV{erreur})</div>]
9	9	#FORMULAIRE_LOGIN{#ENV{cible},'',0}
10	10	</div>

_squelettes_/z-dist/content/404.html

r44605	r45981
6	6	<h1 class="h1"><:pass_erreur:> 404</h1>
7	7	</div>
8		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	8	[<div class="chapo">(#ENV{erreur})</div>]
9	9	</div>

_squelettes_/zesty/pages/contenu/404.html

r27614	r45981
6	6	<h1><:pass_erreur:> 404</h1>
7	7	</div>
8		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	8	[<div class="chapo">(#ENV{erreur})</div>]

_squelettes_/zpip/contenu/page-401.html

r39664	r45981
6	6	<h1 class="h1"><:pass_erreur:>[ (#ENV{status})]</h1>
7	7	</div>
8		[<div class="chapo">(#ENV*{erreur}\|propre)</div>]
	8	[<div class="chapo">(#ENV{erreur})</div>]
9	9	#FORMULAIRE_LOGIN{#ENV{cible},'',0}
10	10	</div>

Note: See TracChangeset for help on using the changeset viewer.

Context Navigation

Changeset 45981 in spip-zone

Legend:

Download in other formats: