sanctureplicum/gitea

Commit Graph

Author	SHA1	Message	Date
Gusted	661d3d28e9	Prevent possible XSS when using jQuery (#18289 ) In the case of misuse or misunderstanding from a developer whereby, if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the creation of a new element. Current usage is using hard-coded selectors in the templates, but nobody prevents that from expanding to user-controlled somehow.	2022-01-16 13:14:32 +08:00
wxiaoguang	1a7473ff45	Split `index.js` to separate files (#17315 ) * split `index.js` to separate files * tune clipboard * fix promise * fix document * remove intermediate empty file * fix async event listener * use `export function` instead of `export {}`, add more comments Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: 6543 <6543@obermui.de>	2021-10-17 01:28:04 +08:00

Author

SHA1

Message

Date

Gusted

661d3d28e9

Prevent possible XSS when using jQuery (#18289 )

In the case of misuse or misunderstanding from a developer whereby,
if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the
creation of a new element. Current usage is using hard-coded selectors
in the templates, but nobody prevents that from expanding to
user-controlled somehow.

2022-01-16 13:14:32 +08:00

wxiaoguang

1a7473ff45

Split `index.js` to separate files (#17315 )

* split `index.js` to separate files

* tune clipboard

* fix promise

* fix document

* remove intermediate empty file

* fix async event listener

* use `export function` instead of `export {}`, add more comments

Co-authored-by: Lunny Xiao <xiaolunwen@gmail.com>
Co-authored-by: 6543 <6543@obermui.de>

2021-10-17 01:28:04 +08:00

2 Commits (661d3d28e97bb49bef075c0314edad5879148aaa)