Roman Rizzi d78357917c SECURITY: Onebox templates' HTML injections. ...

The use of triple-curlies on Mustache templates opens the possibility for HTML injections.

2023-11-09 13:39:11 +11:00

..

backups

…

csv

…

db

DEV: Allow DROP NOT NULL in pre-deploy migrations (#20775)

2023-03-22 14:43:32 +00:00

emails

DEV: Add email fixture (#23364)

2023-09-01 16:29:47 +10:00

encodings

…

feed

…

i18n

…

images

SECURITY: Reduce maximum size of SVG sprite cache to prevent DoS

2023-09-12 15:31:28 -03:00

json

DEV: Fix flaky core backend spec (#22650)

2023-07-18 07:01:19 +08:00

md

A11Y: Set role=presentation if alt attr is missing (#18546)

2022-10-12 14:07:37 +03:00

media

…

mmdb

…

multisite

…

onebox

SECURITY: Onebox templates' HTML injections.

2023-11-09 13:39:11 +11:00

pdf

…

plugins

FEATURE: Serve RTL versions of admin and plugins CSS bundles for RTL locales (#21876)

2023-06-01 05:27:11 +03:00

scss

…

site_settings

…

theme_settings

FIX: Use the default value correctly for theme settings of type uploads (#20541)

2023-03-06 11:41:47 +03:00

themes

DEV: Add support for uploading a theme from a directory in system tests (#23402)

2023-09-12 07:38:47 +08:00

woff2

…