discourse/app
David Taylor 166fe3bb34
FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860)
Previously we were only applying the restriction to `a[href]` and `img[src]`. This commit ensures we apply the same logic to all allowlisted media src attributes.
2022-05-19 11:18:30 +01:00
..
assets FIX: Apply 'allowed_href_schemes' to all src/srcset attributes (#16860) 2022-05-19 11:18:30 +01:00
controllers DEV: New readonly mode. Only applies to non-staff (#16243) 2022-05-17 13:06:08 -05:00
helpers FIX: Use registered bookmarkables for BookmarkManager (#16695) 2022-05-11 09:51:03 +10:00
jobs DEV: Remove PostAction/UserAction bookmark refs (#16681) 2022-05-10 10:42:18 +10:00
mailers FIX: Use our header value instead of custom header on duplicates (#16711) 2022-05-11 13:47:12 +10:00
models FIX: Apply 'hide email account' for invites 2022-05-17 09:56:06 +02:00
serializers FIX: Allow .ics for polymorphic bookmarks (#16694) 2022-05-11 09:29:24 +10:00
services FEATURE: Include participants in PN search data (#16855) 2022-05-18 10:34:01 -04:00
views FEATURE: Add page title to 404 pages (#16846) 2022-05-17 18:37:43 +03:00