log

age author description
Wed, 27 Feb 2019 02:30:18 +0100 Mads Kiilerich base: escape branch/tag/bookmark names in 'Switch To' menu to prevent XSS
Mon, 11 Feb 2019 21:36:55 +0100 Mads Kiilerich templates/summary: escape branch/tag/bookmark names in 'Download as zip' links to prevent XSS
Sat, 26 Jan 2019 20:27:50 +0100 Thomas De Schampheleire lib: sanitize HTML for all types of README rendering, not only markdown
Sat, 26 Jan 2019 20:00:14 +0100 Thomas De Schampheleire cleanup: remove unnecessary (and potentially problematic) use of 'literal'
Wed, 27 Feb 2019 02:29:34 +0100 Mads Kiilerich base: when using a custom select2 escapeMarkup function, make it clear that the exception only is for a static safe string
Wed, 27 Feb 2019 02:23:26 +0100 Mads Kiilerich pullrequests: prevent XSS in @mention completion when first and last names cannot be trusted
Wed, 27 Feb 2019 02:23:26 +0100 Mads Kiilerich pullrequests: prevent XSS when 'Potential Reviewers' are selected and first and last names cannot be trusted