David Mehren c32b1cf42b Don't store mermaid diagrams in innerHTML ... Using jQuery's `.html()` method stores the given string as `innerHTML`, which enables injection of arbitrary DOM elements. Using `.text()` instead mitigates this issue. Signed-off-by: David Mehren <git@herrmehren.de>		2020-12-27 10:14:27 +01:00
..
lib	Remove pdf export code	2020-11-26 21:09:23 +01:00
cover.js	Replace CodiMD with HedgeDoc	2020-11-14 21:18:36 +01:00
extra.js	Don't store mermaid diagrams in innerHTML	2020-12-27 10:14:27 +01:00
history.js
htmlExport.js
index.js	Remove reference to nonexisting DOM element	2020-11-27 19:24:43 +01:00
locale.js	Add config option for cookie SameSite policy	2020-08-27 02:04:49 +02:00
mathjax-config-extra.js
pretty.js
render.js
reveal-markdown.js
slide.js
utils.js