Roman Rizzi d78357917c SECURITY: Onebox templates' HTML injections. ...

The use of triple-curlies on Mustache templates opens the possibility for HTML injections.

2023-11-09 13:39:11 +11:00

..

backups

FIX: Backups should use relative paths for local uploads

2020-08-21 15:22:28 +02:00

csv

FEATURE: Add support for case-sensitive Watched Words (#17445)

2022-08-02 10:06:03 +02:00

db

DEV: Allow DROP NOT NULL in pre-deploy migrations (#20775)

2023-03-22 14:43:32 +00:00

emails

DEV: Add email fixture (#23364)

2023-09-01 16:29:47 +10:00

encodings

…

feed

FIX: Select best link from Atom feed (#15663)

2022-01-21 17:54:18 +02:00

i18n

FIX: Missing translation when translation override contained a %{key} (#16625)

2022-05-04 17:35:22 +02:00

images

SECURITY: Reduce maximum size of SVG sprite cache to prevent DoS

2023-09-12 15:31:28 -03:00

json

DEV: Fix flaky core backend spec (#22650)

2023-07-18 07:01:19 +08:00

md

A11Y: Set role=presentation if alt attr is missing (#18546)

2022-10-12 14:07:37 +03:00

media

FIX: Add attachment content-disposition for all non-image files (#10058)

2020-06-17 11:16:37 +10:00

mmdb

…

multisite

…

onebox

SECURITY: Onebox templates' HTML injections.

2023-11-09 13:39:11 +11:00

pdf

FEATURE: Add attachments to outgoing emails

2019-07-25 15:57:45 +02:00

plugins

FEATURE: Serve RTL versions of admin and plugins CSS bundles for RTL locales (#21876)

2023-06-01 05:27:11 +03:00

scss

…

site_settings

…

theme_settings

FIX: Use the default value correctly for theme settings of type uploads (#20541)

2023-03-06 11:41:47 +03:00

themes

DEV: Add support for uploading a theme from a directory in system tests (#23402)

2023-09-12 07:38:47 +08:00

woff2

…