E.Noorlander
ab5dc31513
- Add sanitizePageParam() method to CodePressCMS to prevent XSS attacks via page parameter - Sanitize page and lang parameters in available_langs URLs - Add CRLF character filtering in MQTTTracker to prevent header injection - URL-encode parameters before storing in cookies Pentest results: 29/30 tests passed (1 false positive on CRLF test - URL-encoded chars in cookie value, no actual header injection possible)