helhum

<?php
error_reporting(E_ALL);

class request {}

class_alias('request', 'old_request');

interface foo {
	public function baz(\request $request);
}

helhum

{namespace t=Helhum\TyposcriptRendering\ViewHelpers}

<button class="ajax-button" data-ajaxUri="{t:uri.ajaxAction(action: 'foo', controller: 'bar') -> f:format.htmlentities()}">
  Click Me
</button>

<script type="text/javascript">
  jQuery.ajax(
    jQuery(".ajax-button").data("ajaxUri")
  ).done(

helhum

<?php
namespace Helhum\ProcessingServices\Resource\Processing;
use TYPO3\CMS\Core\Utility;

class YoutubeProcessing {

	/**
	 * @var \TYPO3\CMS\Core\Resource\Processing\LocalImageProcessor
	 */
	protected $processor;

helhum

Keybase proof

I hereby claim:

• I am helhum on github.
• I am helhum (https://keybase.io/helhum) on keybase.
• I have a public key whose fingerprint is B367 F506 636E E4BA 5A20 0D30 D267 B02C 5A83 969C

To claim this, I am signing this object:

helhum

RewriteEngine On

RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_FILENAME} !-l
RewriteRule .* /index.php [L]

helhum

// Value = <h1>Hello</h1>

<!-- Assuming {Value} will be correctly encoded for HTML attribute context -->
<a href="/foo" id="foo" title="{Value}">{Value}</a>

<div id="targetEl"></div>


<script>
  // This kind of JS can still lead to XSS

helhum

<?php
namespace Helhum\Example\Controller;

/***************************************************************
 *  Copyright notice
 *
 *  (c) 2014 Helmut Hummel
 *
 *  All rights reserved
 *

helhum

<?php
namespace Bitmotion\NawSecuredl\Core;

/***************************************************************
 *  Copyright notice
 *
 *  (c) 2013 Helmut Hummel ([email protected])
 *  All rights reserved
 *
 *  This script is part of the Typo3 project. The Typo3 project is