Sarah Hoffmann f94828c3f4 properly escape class parameter ...

The class parameter was used as is, allowing for potential
SQL injection via the API.

Thanks to @bladeswords for finding this.

2020-05-02 21:54:14 +02:00

..

css

website dependencies: jQuery v2.1 => 3.5, leaflet 1.3 => 1.6

2020-04-11 18:18:57 +02:00

images

status after hackweekend London

2016-01-15 17:11:12 +01:00

js

website dependencies: jQuery v2.1 => 3.5, leaflet 1.3 => 1.6

2020-04-11 18:18:57 +02:00

deletable.php

Add JSON output for /deletable.php and /polygons.php

2020-04-10 15:34:56 +02:00

details.php

properly escape class parameter

2020-05-02 21:54:14 +02:00

hierarchy.php

/hierarchy.php was missing namespace calling AddressDetails

2019-07-28 22:05:51 +02:00

lookup.php

fix logging of lookup calls

2020-04-13 11:55:24 +02:00

polygons.php

Add JSON output for /deletable.php and /polygons.php

2020-04-10 15:34:56 +02:00

reverse.php

Nominatim::DB support input variables, custom error messages

2019-03-10 16:56:36 +01:00

search.php

Fixed PHP warning from #1523

2019-10-15 08:46:19 +02:00

status.php

replace database abstraction DB with PDO

2019-03-09 00:18:15 +01:00