mirror of
https://github.com/overleaf/overleaf.git
synced 2025-01-16 16:12:35 +00:00
7f7b10aa09
When showing system-messages, use default Angular sanitizer, also, on the admin panel itself, show the verbatim text of the message. This solves a mild Stored-XSS vulnerability whereby a user could put `<script>` tags in a message. We don't want that, but we do want to be able to use basic html tags. |
||
---|---|---|
.. | ||
affiliations | ||
project-list | ||
subscription | ||
account-settings.coffee | ||
account-upgrade.coffee | ||
announcements.coffee | ||
annual-upgrade.coffee | ||
bonus.coffee | ||
clear-sessions.coffee | ||
contact-us.coffee | ||
event.coffee | ||
group-members.coffee | ||
keys.coffee | ||
learn.coffee | ||
new-subscription.coffee | ||
plans.coffee | ||
register-users.coffee | ||
scribtex-popup.coffee | ||
subscription-dashboard.coffee | ||
system-messages.coffee | ||
templates.coffee | ||
translations.coffee | ||
user-details.coffee |