Natalie Tay 188cb58daa

SECURITY: Fixes for main (#28137) ...

* SECURITY: Update default allowed iframes list

Change the default iframe url list to all include 3 slashes.

* SECURITY: limit group tag's name length

Limit the size of a group tag's name to 100 characters.

Internal ref - t/130059

* SECURITY: Improve sanitization of SVGs in Onebox

---------

Co-authored-by: Blake Erickson <o.blakeerickson@gmail.com>
Co-authored-by: Régis Hanol <regis@hanol.fr>
Co-authored-by: David Taylor <david@taylorhq.com>

2024-07-30 14:19:01 +08:00

..

engine

FEATURE: Allow oneboxing private GitHub repo URLs and add private indicator to HTML (#27947)

2024-07-19 12:21:45 +10:00

mixins

FEATURE: Allow for multiple GitHub onebox tokens (#27887)

2024-07-15 13:07:36 +10:00

templates

FEATURE: Allow oneboxing private GitHub repo URLs and add private indicator to HTML (#27947)

2024-07-19 12:21:45 +10:00

domain_checker.rb

DEV: Fix various rubocop lints (#24749)

2023-12-06 23:25:00 +01:00

engine.rb

FEATURE: Add onebox for loom (#26016)

2024-03-04 15:12:08 -07:00

file_type_finder.rb

DEV: Apply syntax_tree formatting to lib/*

2023-01-09 12:10:19 +00:00

helpers.rb

FEATURE: use new site setting for onebox custom user agent. (#28045)

2024-07-24 04:45:30 +05:30

json_ld.rb

DEV: Replace custom Onebox blank implementation with ActiveSupport (#23827)

2023-10-07 19:54:26 +02:00

layout_support.rb

DEV: Apply syntax_tree formatting to lib/*

2023-01-09 12:10:19 +00:00

layout.rb

DEV: Replace custom Onebox symbolize_keys implementation with ActiveSupport (#23828)

2023-10-09 09:32:09 +02:00

matcher.rb

DEV: Apply syntax_tree formatting to lib/*

2023-01-09 12:10:19 +00:00

movie.rb

DEV: Apply syntax_tree formatting to lib/*

2023-01-09 12:10:19 +00:00

normalizer.rb

DEV: Replace custom Onebox blank implementation with ActiveSupport (#23827)

2023-10-07 19:54:26 +02:00

oembed.rb

DEV: Replace custom Onebox symbolize_keys implementation with ActiveSupport (#23828)

2023-10-09 09:32:09 +02:00

open_graph.rb

DEV: Replace custom Onebox blank implementation with ActiveSupport (#23827)

2023-10-07 19:54:26 +02:00

preview.rb

DEV: Apply syntax_tree formatting to lib/*

2023-01-09 12:10:19 +00:00

sanitize_config.rb

SECURITY: Fixes for main (#28137)

2024-07-30 14:19:01 +08:00

status_check.rb

SECURITY: Expand and improve SSRF Protections (#18815)

2022-11-01 16:33:17 +00:00

template_support.rb

…

view.rb

…