jekkos 97ca738b2d fix: Escape dynamic output and fix CSS property in barcode_sheet.php (#4501) ...

- Add esc() for dynamic output in HTML attributes and URLs
- Cast numeric values to int for CSS properties
- Fix invalid 'borderspacing' CSS property to 'border-spacing'
- Add quotes around class attribute

Closes #4487

Co-authored-by: Ollama <ollama@steganos.dev>

2026-04-16 19:37:06 +00:00

..

attributes

Fix stored XSS vulnerability in Attribute Definitions (GHSA-rvfg-ww4r-rwqf) (#4429)

2026-03-14 15:33:58 +00:00

barcodes

fix: Escape dynamic output and fix CSS property in barcode_sheet.php (#4501)

2026-04-16 19:37:06 +00:00

cashups

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

configs

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

customers

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

employees

Fix stored XSS vulnerabilities in employee permissions and customer data

2026-03-08 18:42:30 +01:00

errors

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

expenses

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

expenses_categories

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

giftcards

Allow anonymous giftcard creation (#4278)

2025-11-24 22:54:52 +01:00

home

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

item_kits

Fix multiple XSS vulnerabilities (#3965) (#4356)

2025-12-22 17:21:49 +01:00

items

Fix filter persistence javascript issues (#4400)

2026-03-11 23:03:21 +01:00

messages

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

partial

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

people

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

receivings

Fix review comments: remove redundant loop and add XSS escaping

2026-03-17 15:32:16 +00:00

reports

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

sales

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

suppliers

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

taxes

Update to CodeIgniter 4.7.2 (#4485)

2026-04-14 01:05:10 +04:00

index.html

Replace tabs with spaces (#4196)

2025-03-28 21:24:21 +04:00

login.php

fix: Handle empty database on fresh install (#4467)

2026-04-08 20:19:25 +00:00

no_access.php

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00

viewData.php

Improve code style and PSR-12 compliance (#4204)

2025-05-02 19:37:06 +02:00