 rugk
|
9e56015652
wipfix: do never accept SVG mime times as safe and always sanitize them
|
преди 2 седмици |
 El RIDO
|
075cd71694
Merge branch 'master' into 2.0.6-forwardport
|
преди 1 месец |
|
El RIDO
|
ad38b2a902
apply ESLint recommendation
|
преди 1 месец |
|
rugk
|
62a74624df
style: add missing semicolons & properly use Error exception class
|
преди 2 месеца |
|
rugk
|
693cd994f1
refactor: remove last jQuery bit for attachment upload
|
преди 2 месеца |
|
rugk
|
0992b03847
style: align EsLint and JsHint to require use-strict in global mode
|
преди 2 месеца |
|
rugk
|
d3732a6d5c
fix: close button in one-time-confirm model could not be found yielding in problem loading such pastes
|
преди 2 месеца |
|
El RIDO
|
a9b84497ed
use more descriptive variable names and comments to clarify purpose of UTF-8 decoding test
|
преди 2 месеца |
|
El RIDO
|
3d4d6bf0e8
address multi-byte codepoint truncation, allowing DOMPurify bypass
|
преди 2 месеца |
|
El RIDO
|
b9aad1c866
add more test cases, stricter SVG handling
|
преди 2 месеца |
|
El RIDO
|
4041a0b077
stricter preview checks, now that the MIME type gets lower cased on extraction
|
преди 2 месеца |
|
El RIDO
|
ff0d596fe2
preventing attachment preview of malicious mime types
|
преди 2 месеца |
|
rugk
|
89e5853197
fix: merge error missing %s in right place catched by tests
|
преди 2 месеца |
|
rugk
|
7e8a3a60ec
Merge remote-tracking branch 'origin/master' into js/removeJQuery
|
преди 2 месеца |
|
El RIDO
|
a364596586
Merge branch 'master' into newtab-sanitize
|
преди 2 месеца |
 Ribas160
|
233e3e2399
Merge remote-tracking branch 'upstream/master' into os-copy-hotkey
|
преди 3 месеца |
|
Ribas160
|
2219039a0a
feat: add i18n keys for Cmd and Ctrl keyboard labels
|
преди 3 месеца |
|
rugk
|
f56c0d1f3b
chore: remove not required manual centering of bootstrap dialogs
|
преди 3 месеца |
|
rugk
|
e70acfb50b
style: fix another JSDoc error
|
преди 3 месеца |
|
rugk
|
df04d3692e
chore: remove jQuery library
|
преди 3 месеца |
|
rugk
|
cdbade05f5
fix: resolve ESLint errors after jQuery removal
|
преди 3 месеца |
|
rugk
|
e5b3940e37
fix: use Object.prototype.hasOwnProperty.call for null-prototype translations object
|
преди 3 месеца |
|
rugk
|
706b0325dc
fix: use null-prototype object for I18n translations lookup table
|
преди 3 месеца |
|
rugk
|
55639c70fb
Merge branch 'master' into js/removeJQuery
|
преди 3 месеца |
|
rugk
|
eb58717657
fix: clear prettyprinted class when re-rendering as plaintext/markdown
|
преди 3 месеца |
|
rugk
|
936a81e055
fix: guard null href in urls2links after jQuery removal
|
преди 3 месеца |
|
rugk
|
e1b07b180f
fix: guard null DOM elements in PasteStatus and I18n after jQuery removal
|
преди 3 месеца |
|
rugk
|
13cbb2069e
style: fix line ending at JS file
|
преди 3 месеца |
|
rugk
|
7f1f40853e
fix: prevent browsers from rendering unsafe attachments like HTML in a new tab
|
преди 3 месеца |
|
Ribas160
|
5d946c52a7
feat: Show OS-specific copy hotkey hint
|
преди 3 месеца |
