index
:
hedgedoc
cindy
Hedgedoc with support for CindyScript
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
public
/
js
/
render.js
(
unfollow
)
Commit message (
Expand
)
Author
Files
Lines
2017-11-24
Prevent XSS vul by srcdoc in iframe
Sheogorath
1
-1
/
+1
2017-09-27
Fix unclosed tags might cause XSS [Security Issue]
Wu Cheng-Han
1
-1
/
+1
2017-04-11
Fix link regex should filter protocol with case insensitive flag [Security Is...
Wu Cheng-Han
1
-1
/
+1
2017-03-22
Fix XSS vulnerability in link regex [Security Issue]
Wu Cheng-Han
1
-2
/
+2
2017-03-22
Fix render.js code styles
Wu Cheng-Han
1
-6
/
+6
2017-03-09
Use JavaScript Standard Style (part 2)
BoHong Li
1
-37
/
+39
2017-02-17
Update to allow li tag specify value number
Wu Cheng-Han
1
-0
/
+2
2016-11-26
Fix slide might able to add unsafe attribute on section tag which cause XSS [...
Wu Cheng-Han
1
-0
/
+1
2016-10-29
Update to support summary tag
Wu Cheng-Han
1
-0
/
+2
2016-10-10
More function expose workaround for reveal-markdown.js
Yukai Huang
1
-0
/
+1
2016-10-08
Resolve dependency module requiring
Yukai Huang
1
-1
/
+5
2016-08-15
Update to support data uri in src attribute of image tag
Wu Cheng-Han
1
-0
/
+6
2016-08-14
Update XSS policy to allow iframe and link with custom protocol
Wu Cheng-Han
1
-10
/
+19
2016-04-20
Update filter XSS to allow attr href starts with '.' or '/'
Cheng-Han, Wu
1
-0
/
+6
2016-04-20
Fix XSS HTML replace might get wrong on the HTML comments in the code tags
Cheng-Han, Wu
1
-0
/
+4
2016-03-04
Fixed filter XSS should allow ordered list specify start number
Cheng-Han, Wu
1
-0
/
+4
2016-02-22
Support kbd tag
Cheng-Han, Wu
1
-1
/
+1
2016-02-16
Updated to support html comment tag in XSS
Cheng-Han, Wu
1
-1
/
+2
2016-02-11
Updated XSS filter options to allow style tag and style attribute
Cheng-Han, Wu
1
-11
/
+21
2016-02-11
Fixed prevent XSS might break lots of tags and only need after rendered
Cheng-Han, Wu
1
-0
/
+13