| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2022-02-06 | Filter out javascript: scheme in U() to avoid more XSS attacks | Christian Schneider | 1 | -0/+6 | |
| 2022-01-24 | Fix PHP 8.1 warning when URL given to U() is invalid | Christian Schneider | 1 | -0/+6 | |
| 2020-01-23 | remove scheme from path when we have empty hostpart and empty schemepart; ↵ | David Flatz | 1 | -0/+12 | |
| this fixes 'a:javascript:alert(origin)' | |||||
| 2018-06-21 | no reason for different naming | Urban Müller | 1 | -0/+211 | |