Dan Brown 349162ea13

Prevented possible XSS via link attachments ...

This filters out potentially malicious javascript: or data: uri's coming
through to be attached to attachments.
Added tests to cover.

Thanks to Yassine ABOUKIR (@yassineaboukir on twitter) for reporting this
vulnerability.

2020-10-31 15:01:52 +00:00

..

Attachment.php

Continued implementation of attachment drag+drop

2020-09-13 18:31:14 +01:00

AttachmentService.php

Prevented possible XSS via link attachments

2020-10-31 15:01:52 +00:00

HttpFetcher.php

PHPCS related fixes.

2019-01-27 15:59:23 +05:30

Image.php

Filled out base Book API endpoints, added example responses

2020-01-12 14:45:54 +00:00

ImageRepo.php

Converted image-manager to be component/HTML based

2020-07-25 00:20:58 +01:00

ImageService.php

Fixed issue where URL params in image names would cause loading failure

2020-07-25 11:18:40 +01:00

UploadService.php

Re-structured the app code to be feature based rather than code type based

2018-09-25 12:30:50 +01:00