Sebastien SAUVAGE bc8b23d35e XSS flaw correction ...

With a client IE < 10 there was a XSS security flaw. Other browsers were
not affected.
Also corrected spacing display with IE<10.

(cherry picked from commit 28813cd82ae47e556b610da3c7302a6709e27431)

Conflicts:
	CHANGELOG.md
	index.php
	js/zerobin.js
	lib/vizhash16x16.php

2015-08-15 22:01:43 +02:00

cfg

fixing regressions from cherrypicking

2015-08-15 21:39:08 +02:00

css

XSS flaw correction

2015-08-15 22:01:43 +02:00

img

Added "Raw text" button.

2015-08-15 20:25:46 +02:00

js

XSS flaw correction

2015-08-15 22:01:43 +02:00

lib

XSS flaw correction

2015-08-15 22:01:43 +02:00

tpl

fixing regressions from cherrypicking

2015-08-15 21:39:08 +02:00

tst

reviewed unit tests, fixing line endings, added more tests

2015-08-15 18:32:31 +02:00

.gitignore

Included .htaccess and .htapasswd for safety.

2013-11-01 01:20:59 +01:00

CHANGELOG.md

XSS flaw correction

2015-08-15 22:01:43 +02:00

CREDITS.md

had to revert to HTML5 instead of XHTML5 because of compatibility

2012-08-28 23:28:41 +02:00

index.php

XSS flaw correction

2015-08-15 22:01:43 +02:00

INSTALL.md

had to revert to HTML5 instead of XHTML5 because of compatibility

2012-08-28 23:28:41 +02:00

README.md

XSS flaw correction

2015-08-15 22:01:43 +02:00

robots.txt

Incorrect structure

2013-11-01 01:22:16 +01:00

Description

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

cryptocryptographyencryptedone-timepastepastebinphpsecurityself-destroyself-hostedself-hosting

Readme 29 MiB

Languages

PHP 47.2%

JavaScript 35.5%

CSS 17.1%

Makefile 0.2%