| Wed, 27 Feb 2019 02:30:58 +0100 |
Mads Kiilerich |
compare: correct display of special branch names in initial placeholder
|
| Tue, 26 Feb 2019 21:27:42 +0100 |
Thomas De Schampheleire |
compare: prevent XSS due to unescaped branch/tag/bookmark names
|
| Wed, 27 Feb 2019 02:30:18 +0100 |
Mads Kiilerich |
base: escape branch/tag/bookmark names in 'Switch To' menu to prevent XSS
|
| Mon, 11 Feb 2019 21:36:55 +0100 |
Mads Kiilerich |
templates/summary: escape branch/tag/bookmark names in 'Download as zip' links to prevent XSS
|
| Sat, 26 Jan 2019 20:27:50 +0100 |
Thomas De Schampheleire |
lib: sanitize HTML for all types of README rendering, not only markdown
|
| Sat, 26 Jan 2019 20:00:14 +0100 |
Thomas De Schampheleire |
cleanup: remove unnecessary (and potentially problematic) use of 'literal'
|
| Wed, 27 Feb 2019 02:29:34 +0100 |
Mads Kiilerich |
base: when using a custom select2 escapeMarkup function, make it clear that the exception only is for a static safe string
|
| Wed, 27 Feb 2019 02:23:26 +0100 |
Mads Kiilerich |
pullrequests: prevent XSS in @mention completion when first and last names cannot be trusted
|
| Wed, 27 Feb 2019 02:23:26 +0100 |
Mads Kiilerich |
pullrequests: prevent XSS when 'Potential Reviewers' are selected and first and last names cannot be trusted
|
| Wed, 27 Feb 2019 02:23:26 +0100 |
Mads Kiilerich |
pullrequests: prevent XSS in 'Potential Reviewers' list when first and last names cannot be trusted
|
| Mon, 11 Feb 2019 21:36:13 +0100 |
Mads Kiilerich |
js: introduce an html_escape function
|
| Sat, 23 Feb 2019 21:10:59 +0100 |
Thomas De Schampheleire |
pull requests: urlify pull request lists to make issue references clickable
|
| Sat, 23 Feb 2019 21:04:26 +0100 |
Thomas De Schampheleire |
pull requests: urlify title to make issue references clickable
|
| Mon, 18 Feb 2019 21:17:58 +0100 |
Manuel Jacob |
hg: improve implementations of `successors` and `precursors` properties of Mercurial changesets
|
| Mon, 18 Feb 2019 17:00:51 +0800 |
Edmund Wong |
model: rename confusing kwargs argument for repo_group update method (Issue #331)
|
