Roman Rizzi d78357917c SECURITY: Onebox templates' HTML injections. ...

The use of triple-curlies on Mustache templates opens the possibility for HTML injections.

2023-11-09 13:39:11 +11:00

..

backups

FIX: Backups should use relative paths for local uploads

2020-08-21 15:22:28 +02:00

csv

FEATURE: Add support for case-sensitive Watched Words (#17445)

2022-08-02 10:06:03 +02:00

db

DEV: Allow DROP NOT NULL in pre-deploy migrations (#20775)

2023-03-22 14:43:32 +00:00

emails

DEV: Add email fixture (#23364)

2023-09-01 16:29:47 +10:00

encodings

FIX: Try detecting encoding of RSS feed

2018-08-01 10:41:20 +02:00

feed

FIX: Select best link from Atom feed (#15663)

2022-01-21 17:54:18 +02:00

i18n

FIX: Missing translation when translation override contained a %{key} (#16625)

2022-05-04 17:35:22 +02:00

images

SECURITY: Reduce maximum size of SVG sprite cache to prevent DoS

2023-09-12 15:31:28 -03:00

json

DEV: Fix flaky core backend spec (#22650)

2023-07-18 07:01:19 +08:00

md

A11Y: Set role=presentation if alt attr is missing (#18546)

2022-10-12 14:07:37 +03:00

media

FIX: Add attachment content-disposition for all non-image files (#10058)

2020-06-17 11:16:37 +10:00

mmdb

UX: Use user locale for locations. (#6527)

2018-10-25 10:54:01 +00:00

multisite

Introduce multisite tests for better coverage.

2017-08-08 12:58:22 +09:00

onebox

SECURITY: Onebox templates' HTML injections.

2023-11-09 13:39:11 +11:00

pdf

FEATURE: Add attachments to outgoing emails

2019-07-25 15:57:45 +02:00

plugins

FEATURE: Serve RTL versions of admin and plugins CSS bundles for RTL locales (#21876)

2023-06-01 05:27:11 +03:00

scss

DEV: Run prettier. (#6420)

2018-09-21 11:02:23 +00:00

site_settings

FIX: fails loud if default setting is not set

2017-08-15 12:07:25 +02:00

theme_settings

FIX: Use the default value correctly for theme settings of type uploads (#20541)

2023-03-06 11:41:47 +03:00

themes

DEV: Add support for uploading a theme from a directory in system tests (#23402)

2023-09-12 07:38:47 +08:00

woff2

FEATURE: support uploads for themes

2017-05-10 15:47:11 -04:00