discourse/app/assets
Daniel Waterworth e37ced96bf
DEV: Don't interpret user field names as HTML (#18317)
This isn't a security bug, because only admins can create user fields
and we have to trust admins, because they can change themes, which are
shown site-wide and can contain unrestricted JS.
2022-09-21 12:21:58 -05:00
..
images FIX: fallback to default push notification icon if none exists (#16961) 2022-06-01 12:00:05 +10:00
javascripts DEV: Don't interpret user field names as HTML (#18317) 2022-09-21 12:21:58 -05:00
stylesheets DEV: Ship first pass of new user page navigation behind feature flag (#18285) 2022-09-21 12:32:47 +08:00