Sarah Hoffmann f549379e31 properly escape class parameter ...

The class parameter was used as is, allowing for potential
SQL injection via the API.

Thanks to @bladeswords for finding this.

2020-05-02 23:01:27 +02:00

..

css

update leaflet.js 1.0 => 1.3

2018-06-14 02:18:00 +02:00

images

status after hackweekend London

2016-01-15 17:11:12 +01:00

js

display viewbox on map

2018-06-14 02:19:19 +02:00

deletable.php

replace double-quoting with single quotes where applicable

2017-10-26 21:40:33 +02:00

details.php

properly escape class parameter

2020-05-02 23:01:27 +02:00

hierarchy.php

unify address details lookup

2018-07-10 23:54:35 +02:00

lookup.php

unify address details lookup

2018-07-10 23:54:35 +02:00

polygons.php

replace PHP sizeof() with either count() or empty()

2018-03-22 12:36:24 +01:00

reverse.php

unify address details lookup

2018-07-10 23:54:35 +02:00

search.php

search/reverse/lookup with geojson,geocodejson output

2018-05-29 17:20:34 +02:00

status.php

add PHPCS Squiz.Arrays.ArrayDeclaration.KeyNotAligned rule

2018-05-08 00:37:41 +02:00