David Taylor 166fe3bb34 FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860) ... Previously we were only applying the restriction to `a[href]` and `img[src]`. This commit ensures we apply the same logic to all allowlisted media src attributes.		2022-05-19 11:18:30 +01:00
..
emoji	FEATURE: Add missing emojis (#15582)	2022-01-14 17:51:13 -03:00
engines	DEV: Replace deprecated String.prototype.substr() (#16233)	2022-04-01 17:35:17 +02:00
allow-lister.js	FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860)	2022-05-19 11:18:30 +01:00
censored-words.js	DEV: apply new coding standards (#10592)	2020-09-04 13:42:47 +02:00
emoji.js	FEATURE: Detect emoji from Emoji 14.0 (#16531)	2022-04-22 08:42:15 +02:00
guid.js	DEV: apply new coding standards (#10592)	2020-09-04 13:42:47 +02:00
inline-oneboxer.js	DEV: removes jquery usage from onebox (#14683)	2021-10-22 13:15:46 +02:00
oneboxer-cache.js	DEV: removes jquery usage from onebox (#14683)	2021-10-22 13:15:46 +02:00
oneboxer.js	DEV: Allow utility class domFromString to take in strings with multiple top level elements (#15548)	2022-01-12 19:49:24 +08:00
pretty-text.js	DEV: Add force_quote_link option to PrettyText (#16034)	2022-02-23 16:13:46 +10:00
sanitizer.js	FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860)	2022-05-19 11:18:30 +01:00
upload-short-url.js	FIX: Load short upload URLs only once (#15918)	2022-02-16 08:57:20 +02:00