a373bf2a01
Non-markdown tags weren't being escaped in chat excerpts. This could be triggered by editing a chat message containing a tag (self XSS), or by replying to a chat message with a tag (XSS). Co-authored-by: Jan Cernik <jancernik12@gmail.com> |
||
|---|---|---|
| .. | ||
| adapters | ||
| components | ||
| controllers | ||
| helpers | ||
| initializers | ||
| lib | ||
| mixins | ||
| models | ||
| modifiers | ||
| pre-initializers | ||
| raw-views | ||
| routes | ||
| services | ||
| styles | ||
| templates | ||
| widgets | ||
| app.js | ||
| index.html | ||
| mapping-router.js | ||