2 Commits
Author SHA1 Message Date
Alessandro RosandGitHub 111302f9e3 use file name suffix for OS-specific code wherever possible (#5787) 2026-05-19 11:48:05 +02:00
Alessandro RosandGitHub e6c20adf28 prevent code injection in case of MTX_QUERY in hooks (#5707)
When MTX_QUERY is used explicitly in hooks, for instance "curl
http://something/?$MTX_QUERY", it can be used to inject arbitrary
commands. MTX_QUERY is now url-encoded to prevent any abuse regardless
of the configuration.
2026-04-29 22:59:40 +02:00