Added output sanitization to events->browse to avoid potential XSS explotitation
Added output encoding to prevent potential XSS vulnerability in admin's micro thesauri module
Added input sanitisation to analysis->save query to prevent presistent XSS vulnerability
Now 'query' param will be extracted from database instead of trusting URL param to prevent potential XSS exploitation
Created an argument encoder class to white list and encode allowed GET params for pagination, sorting and filtering. Persons browsing is fixed now, other modules browsing not yet.
Now Events Module uses ArgumentEncoder to cleanse GET params and avoid XSS.
Now Documents Module uses ArgumentEncoder to cleanse GET params and avoid XSS.
Now Analysis Module uses ArgumentEncoder to cleanse GET params and avoid XSS.
phpCAS updated to version 1.3.3
Added a password policy filter in the UI (no server validation) in order to enforce users to use stronger (complex) passwords.
Added password complecity validation to new user's creation form. Extracted away some code duplication.
Slighty changed cookie check strategy to avoid setting an extra cookie. Now the check is performed on regular session cookie
Added session name sanitisation prev to session start to avoid a potential SQL injection vulnerability.
If PEAR is not present, a very lightweight version of PEAR will be loaded from the local folder instead. Also solved a bug with GACode. Added extra check on key synchronization.
Merge pull request #6 from txau/bug-yubikey-pear

If PEAR is not present, a very lightweight version of PEAR will be loade...
it,hu,sr languages added
improved error log
Merge pull request #8 from txau/bug-xss-mt-customization

Added output encoding to prevent potential XSS vulnerability in admin's ...
Merge pull request #9 from txau/bug-paginator-xss

Bug paginator xss
Merge pull request #10 from txau/bug-php-session-sql-injection

Added session name sanitisation prev to session start to avoid a potenti...