hedgedoc/public/js
David Mehren c32b1cf42b
Don't store mermaid diagrams in innerHTML
Using jQuery's `.html()` method stores the given string as `innerHTML`, which enables injection of arbitrary DOM elements.
Using `.text()` instead mitigates this issue.

Signed-off-by: David Mehren <git@herrmehren.de>
2020-12-27 10:14:27 +01:00
..
lib Remove pdf export code 2020-11-26 21:09:23 +01:00
cover.js
extra.js Don't store mermaid diagrams in innerHTML 2020-12-27 10:14:27 +01:00
history.js
htmlExport.js
index.js Remove reference to nonexisting DOM element 2020-11-27 19:24:43 +01:00
locale.js
mathjax-config-extra.js
pretty.js
render.js
reveal-markdown.js
slide.js
utils.js