 El RIDO
|
2cbb8bf3ca
in translation, allow links to be inserted unencoded into href attribute, simplfy sanitation by allowing only <a> tags in DOMpurify for plain text and comments and avoid DOMpurify removing magnet links, fixes #579
|
6 years ago |
|
El RIDO
|
3996f82404
relax encoding of slashes just for plaintext display, so links can be detected
|
6 years ago |
|
El RIDO
|
1b206e8495
ensuring consistent use of php side encoding, testing all encoding cases, correctly report the language in the <html> tag
|
6 years ago |
|
El RIDO
|
cc0920fc09
add HTML entity encoding to PHP translation logic, remove exception to allow <br/> tags in DOMpurify by eliminating the single case that made use of it
|
6 years ago |
|
El RIDO
|
91003d6597
Merge remote-tracking branch 'origin/master' into displayEncoding
|
6 years ago |
|
El RIDO
|
8a6415ef5f
fixing jsverify rngStates 0220439df7ec68a15b, 015c81b7afd06e4293 & 041e3d57692b08fc4a
|
6 years ago |
 Erion
|
3f8cf1792d
Switch to single quotes.
|
6 years ago |
|
Erion
|
f6899785a9
Fix ARIA for Editor/preview tabs.
|
6 years ago |
|
El RIDO
|
2d11d7b29e
re-applying sprintf simplification and rephrased jsdoc block
|
6 years ago |
|
El RIDO
|
29efc14aa7
Revert "implement simplified translation logic, forcing the use of safe application via jQuery element"
|
6 years ago |
|
El RIDO
|
62365880b4
implement simplified translation logic, forcing the use of safe application via jQuery element
|
6 years ago |
|
El RIDO
|
aa3f1206b2
rewriting translations to pass jQuery element where easily possible
|
6 years ago |
|
El RIDO
|
42130e0468
prevent potentially non-encoded string from getting returned
|
6 years ago |
|
El RIDO
|
685c354d0e
several changes:
|
6 years ago |
|
El RIDO
|
fa9d3037ba
fixing logic & indentation
|
6 years ago |
|
El RIDO
|
7b87dc3ca9
cleanup revert
|
6 years ago |
|
El RIDO
|
0d08edbe55
Revert "getting rid of htmlEntities (except for tests)" a0740ff79f9076ec7fa4d80bdfb32337a7136482
|
6 years ago |
|
El RIDO
|
cec5cb41d7
Partial revert "Do not double-encode HTML in i18n", only revert the removal of required encoding logic - still has to be moved
|
6 years ago |
|
El RIDO
|
76eff6a87a
Revert "[TEST] Try to disallow vulnerable cases" to remove accidentally committed file and statement that breaks the tests
|
6 years ago |
 rugk
|
eb549d70d1
Invert conatainsLink logic
|
6 years ago |
|
rugk
|
ebc2d649c4
[TEST] Try to disallow vulnerable cases
|
6 years ago |
|
rugk
|
01414e43ca
Do not double-encode HTML in i18n
|
6 years ago |
|
El RIDO
|
599264e167
partially address #556 - now comments can only be added after successfull decryption
|
6 years ago |
|
El RIDO
|
ed590ee557
incrementing version
|
6 years ago |
|
El RIDO
|
ef8943d838
upgrading base-x library to 3.0.7
|
6 years ago |
|
El RIDO
|
2fd649db14
upgrading showdown to released 1.9.1 version
|
6 years ago |
|
El RIDO
|
a9bf667f8e
address error, displayed when paste has attachment, but configuration has them disabled
|
6 years ago |
|
El RIDO
|
4bf7f863dc
more general solution addressing #554, kudos @rugk for the suggestions
|
6 years ago |
|
El RIDO
|
8d0ac336d2
addressing jsverifyRngState 8b8f0d4ec2a67139b5, fixes HTML injection via filename, closes #554
|
6 years ago |
 Haocen Xu
|
87cf61c39b
Update SRI
|
6 years ago |
