discourse/app/assets/javascripts/admin/addon/templates/components/site-settings
Roman Rizzi 5e4c0e2caa
FEATURE: Treat site settings as plain text and add a new HTML type. (#12618)
To add an extra layer of security, we sanitize settings before shipping them to the client. We don't sanitize those that have the "html" type.

The CookedPostProcessor already uses Loofah for sanitization, so I chose to also use it for this. I added it to our gemfile since we installed it as a transitive dependency.
2021-04-07 12:51:19 -03:00
..
bool.hbs
category-list.hbs
category.hbs REVERT: revert change from action + mut to mut (#10844) 2020-10-06 23:50:05 +02:00
color.hbs
compact-list.hbs
emoji-list.hbs DEV: Added support for custom site setting 'emoji_list' (#12414) 2021-04-07 15:32:05 +02:00
enum.hbs REVERT: revert change from action + mut to mut (#10844) 2020-10-06 23:50:05 +02:00
group-list.hbs
host-list.hbs
html.hbs FEATURE: Treat site settings as plain text and add a new HTML type. (#12618) 2021-04-07 12:51:19 -03:00
list.hbs
secret-list.hbs
simple-list.hbs
string.hbs DEV: Add experimental json_scheme site setting type (#12226) 2021-03-01 09:15:17 -05:00
tag-list.hbs FIX: Allow all tags in site/theme settings, ignore tag group restrictions (#12067) 2021-02-12 14:59:21 +00:00
upload.hbs
uploaded-image-list.hbs
url-list.hbs
value-list.hbs