mirrors
/
forgejo
mirror of
1
Fork 0
Code Issues Releases Activity
forgejo/templates/repo
History
Gusted 4fdd0ed728
[SECURITY] Fix XSS in dismissed review 
- It's possible for reviews to not be assiocated with users, when they
were migrated from another forge instance. In the migration code,
there's no sanitization check for author names, so they could contain
HTML tags and thus needs to be properely escaped.
- Pass `$reviewerName` trough `Escape`.

(cherry picked from commit fe2df46d05)

Conflicts:
	templates/repo/issue/view_content/comments.tmpl
	trivial context conflict
 		2024-02-22 22:44:22 +01:00
..
actions Actions list enhancements (#25601) (#25678) 2023-07-04 13:00:34 +00:00
branch Several fixes for mobile UI (#25634) (#25689) 2023-07-07 00:34:00 +02:00
cite Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
diff Fix being unable to use a repo that prohibits accepting PRs as a PR source. (#26785) (#26790) 2023-09-08 08:09:18 +02:00
editor Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
find Refactor hiding-methods, remove jQuery show/hide, remove `.hide` class, remove inline style=display:none (#22950) 2023-02-19 12:06:14 +08:00
graph Improve commit graph alignment and truncating (#26112) (#26127) 2023-07-26 13:49:15 +02:00
issue [SECURITY] Fix XSS in dismissed review 2024-02-22 22:44:22 +01:00
migrate [SECURITY] review(kn4ck3r): more template escapes 2024-02-22 22:33:06 +01:00
projects Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
pulls Don't stack PR tab menu on small screens (#25789) 2023-08-18 15:40:21 +02:00
release Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
settings [SECURITY] review(kn4ck3r): more template escapes 2024-02-22 22:33:06 +01:00
tag RSS icon fixes (#24476) 2023-05-10 22:27:02 +00:00
wiki [SECURITY] Fix XSS in wiki last commit information 2024-02-22 22:36:14 +01:00
activity.tmpl Fix UI on mobile view (#25315) (#25340) 2023-06-18 13:02:41 +00:00
blame.tmpl Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
branch_dropdown.tmpl Make Issue/PR/projects more compact, misc CSS tweaks (#24459) 2023-05-03 17:58:59 -04:00
clone_buttons.tmpl Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764) 2023-07-10 00:19:24 +02:00
clone_script.tmpl Rework button coloring, add focus and active colors (#24507) 2023-05-29 12:45:22 +00:00
commit_page.tmpl Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764) 2023-07-10 00:19:24 +02:00
commit_status.tmpl Make pending commit status yellow again (#25935) (#25968) 2023-07-24 07:58:56 +02:00
commit_statuses.tmpl Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
commits.tmpl Fix some UI alignments (#25277) (#25290) 2023-06-16 00:32:59 +00:00
commits_list.tmpl Several fixes for mobile UI (#25634) (#25689) 2023-07-07 00:34:00 +02:00
commits_list_small.tmpl Use flex to align SVG and text (#25163) (#25260) 2023-06-14 13:21:48 -04:00
commits_table.tmpl Fix commit compare style (#26209) (#26226) 2023-07-30 07:46:19 +02:00
create.tmpl Fix incorrect "tabindex" attributes (#26733) (#26734) 2023-09-08 08:07:19 +02:00
create_helper.tmpl Add templates to customize text when creating and migrating repositories 2023-01-24 22:36:48 -05:00
empty.tmpl Fix UI on mobile view (#25315) (#25340) 2023-06-18 13:02:41 +00:00
file_info.tmpl Show if File is Executable (#25287) (#25300) 2023-06-16 09:29:26 +00:00
forks.tmpl Remove fomantic ".link" selector and styles (#23888) 2023-04-03 20:47:23 -04:00
graph.tmpl Replace remaining fontawesome dropdown icons with SVG (#24455) 2023-05-01 05:35:02 -04:00
header.tmpl Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764) 2023-07-10 00:19:24 +02:00
home.tmpl Hide `add file` button for pull mirrors (#25748) (#25751) 2023-07-07 14:12:59 +00:00
icon.tmpl Move helpers to be prefixed with `gt-` (#22879) 2023-02-13 17:59:59 +00:00
packages.tmpl Add main landmark to templates and adjust titles (#22670) 2023-02-01 22:56:10 +00:00
release_tag_header.tmpl Fix incorrect release count (#25879) (#25887) 2023-07-14 09:32:43 +00:00
search.tmpl Use data-tooltip-content for tippy tooltip (#23649) 2023-03-24 18:35:38 +08:00
search_name.tmpl Clean template/helper.go (#23922) 2023-04-07 03:31:41 -04:00
shabox_badge.tmpl Fix shabox regression (#22924) 2023-02-16 09:37:11 +08:00
sub_menu.tmpl Fix tags header and pretty format numbers (#25624) (#25694) 2023-07-05 07:08:16 +00:00
unicode_escape_prompt.tmpl Clarify "text-align" CSS helpers, fix clone button padding (#25763) (#25764) 2023-07-10 00:19:24 +02:00
upload.tmpl Refactor `i18n` to `locale` (#20153) 2022-06-27 15:58:46 -05:00
user_cards.tmpl Change `join_on` translation to `joined_on` and include placeholder for the date (#24550) 2023-05-06 18:10:30 +08:00
view_file.tmpl Button and color enhancements (#24989) (#25176) 2023-06-11 02:13:08 +00:00
view_list.tmpl Various UI fixes (#25264) (#25431) 2023-06-22 10:19:38 +00:00
watchers.tmpl Fix user-cards format (#24428) 2023-04-29 15:43:01 -04:00