4 Commits

Author	SHA1	Message	Date
Jon Dufresne	7aabd62380	Fixed #25778 -- Updated docs links to use https when available.	2015-12-01 08:01:34 -05:00
Tim Graham	011a54315e	Made is_safe_url() reject URLs that start with control characters. ... This is a security fix; disclosure to follow shortly.	2015-03-18 19:20:07 -04:00
Tim Graham	1c83fc88d6	Fixed an infinite loop possibility in strip_tags(). ... This is a security fix; disclosure to follow shortly.	2015-03-18 19:20:07 -04:00
Tim Graham	9ddfe9b301	Added stub release notes for security releases.	2015-03-18 19:20:07 -04:00