search

Bruno17 / MIGX

MIGX for revo 2.2 and above
83 stars 78 forks source link

Set default to not allow $_REQUEST in getImageList snippet #331

Closed jgulledge19 closed 5 years ago

jgulledge19 commented 5 years ago

Set default to not allow $_REQUEST in getImageList snippet, if you want to allow then add allowRequest=1 to your snippet call/properties.

This will prevent unwanted consequences of URL parameter guessing. I do not want to allow any input from URL parameters for public snippets unintentionally.

New Property for getImageList: allowRequest it expects values of 1 or 0. Default is 0 for false.