]> source.dussan.org Git - gitea.git/commit
projects / gitea.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 03ba12a) | patch
Improve HTML escaping helper (#12562)
authorsilverwind <me@silverwind.io>
Sat, 22 Aug 2020 12:36:56 +0000 (14:36 +0200)
committerGitHub <noreply@github.com>
Sat, 22 Aug 2020 12:36:56 +0000 (13:36 +0100)
commitee5e5a50934906df476c3b898c2fe8e0df984f3c
treea4f3a6c30e862ca77bb509d122cdfc04912e258atree | snapshot
parent03ba12aabf95ced8398c7859deff76780a4577cdcommit | diff
Improve HTML escaping helper (#12562)

The previous method did not escape single quotes which under some
circumstances can lead to XSS vulnerabilites and the fact that it
depends on jQuery is also not ideal. Replace it with a lightweight
module.
package-lock.json diff | blob | history
package.json diff | blob | history
web_src/js/index.js diff | blob | history
Git with a cup of tea! Painless self-hosted all-in-one software development service, including Git hosting, code review, team collaboration, package registry and CI/CD: https://github.com/go-gitea/gitea