discourse

Commit Graph

Author	SHA1	Message	Date
David Taylor	0f7b198ca0	FIX: Ensure values are escaped in select-kit dropdowns (#16576 ) The values in Discourse dropdown menus only come from admin-defined strings, not unsanitised end-user input, so this lack of escaping was not exploitable.	2022-04-28 08:52:29 +01:00
Joffrey JAFFEUX	cb59681d86	DEV: select-kit third major update with focus on accessibility (#13303 ) Major changes included: - better support for screen readers - trapping focus in modals - better tabbing order in composer - alerts on no content found/number of items found - better autofocus in modals - mini-tag-chooser is now a multi-select component - each multi-select-component will now display selection on one row	2021-08-23 10:44:19 +02:00

Author

SHA1

Message

Date

David Taylor

0f7b198ca0

FIX: Ensure values are escaped in select-kit dropdowns (#16576 )

The values in Discourse dropdown menus only come from admin-defined strings, not unsanitised end-user input, so this lack of escaping was not exploitable.

2022-04-28 08:52:29 +01:00

Joffrey JAFFEUX

cb59681d86

DEV: select-kit third major update with focus on accessibility (#13303 )

Major changes included:
- better support for screen readers
- trapping focus in modals
- better tabbing order in composer
- alerts on no content found/number of items found
- better autofocus in modals
- mini-tag-chooser is now a multi-select component
- each multi-select-component will now display selection on one row

2021-08-23 10:44:19 +02:00

2 Commits