overleaf

7609 commits 3 branches 7 tags 221 MiB

Author	SHA1	Message	Date
Shane Kilkelly	7f7b10aa09	Sanitize display of system messages. When showing system-messages, use default Angular sanitizer, also, on the admin panel itself, show the verbatim text of the message. This solves a mild Stored-XSS vulnerability whereby a user could put `<script>` tags in a message. We don't want that, but we do want to be able to use basic html tags.	2018-08-22 10:15:50 +01:00
Shane Kilkelly	b0dd7475b0	fix pug syntax	2017-01-31 14:57:22 +00:00
Shane Kilkelly	57cd54bf55	WIP: migrate from jade to pug	2017-01-20 12:03:02 +00:00

Author

SHA1

Message

Date

Shane Kilkelly

7f7b10aa09

Sanitize display of system messages.

When showing system-messages, use default Angular sanitizer, also,
on the admin panel itself, show the verbatim text of the message.

This solves a mild Stored-XSS vulnerability whereby a user could
put `<script>` tags in a message. We don't want that, but we do want
to be able to use basic html tags.

2018-08-22 10:15:50 +01:00

Shane Kilkelly

b0dd7475b0

fix pug syntax

2017-01-31 14:57:22 +00:00

Shane Kilkelly

57cd54bf55

WIP: migrate from jade to pug

2017-01-20 12:03:02 +00:00

Renamed from services/web/app/views/admin/index.jade (Browse further)

3 commits