George Joseph 444be00e05 http.c: Change httpstatus to default disabled and sanitize output. ...

To address potential security issues, the httpstatus page is now disabled
by default and the echoed query string and cookie output is html-escaped.

Resolves: #GHSA-v6hp-wh3r-cwxh

UpgradeNote: To prevent possible security issues, the `/httpstatus` page
served by the internal web server is now disabled by default.  To explicitly
enable it, set `enable_status=yes` in http.conf.

2026-02-05 08:39:44 -07:00

..

basic-pbx

general: Fix broken links.

2024-01-12 18:29:19 +00:00

samples

http.c: Change httpstatus to default disabled and sanitize output.

2026-02-05 08:39:44 -07:00