David Taylor 166fe3bb34

FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860) ...

Previously we were only applying the restriction to `a[href]` and `img[src]`. This commit ensures we apply the same logic to all allowlisted media src attributes.

2022-05-19 11:18:30 +01:00

..

emoji

FEATURE: Add missing emojis (#15582)

2022-01-14 17:51:13 -03:00

engines

DEV: Replace deprecated String.prototype.substr() (#16233)

2022-04-01 17:35:17 +02:00

allow-lister.js

FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860)

2022-05-19 11:18:30 +01:00

censored-words.js

DEV: apply new coding standards (#10592)

2020-09-04 13:42:47 +02:00

emoji.js

FEATURE: Detect emoji from Emoji 14.0 (#16531)

2022-04-22 08:42:15 +02:00

guid.js

DEV: apply new coding standards (#10592)

2020-09-04 13:42:47 +02:00

inline-oneboxer.js

DEV: removes jquery usage from onebox (#14683)

2021-10-22 13:15:46 +02:00

oneboxer-cache.js

DEV: removes jquery usage from onebox (#14683)

2021-10-22 13:15:46 +02:00

oneboxer.js

DEV: Allow utility class domFromString to take in strings with multiple top level elements (#15548)

2022-01-12 19:49:24 +08:00

pretty-text.js

DEV: Add force_quote_link option to PrettyText (#16034)

2022-02-23 16:13:46 +10:00

sanitizer.js

FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860)

2022-05-19 11:18:30 +01:00

upload-short-url.js

FIX: Load short upload URLs only once (#15918)

2022-02-16 08:57:20 +02:00