nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
diaspora/app/assets/javascripts
History
Maxwell Salzberg 190fceaf5c [SECURITY FIX] please update your pod ASAP 
This is a fix for public messages, where a malicious pod could spoof a message from someone a user was connected to, as the verified signatures were not checked that the object was also from said sender.  This hole only affected public messages, and the private part of code had the correct checks
THX to s-f-s(Stephan Schulz) for reporting and tracking down this issue, and props to Raven24(florian.staudacher@gmx.at) for helping me test the patch
2012-07-02 10:00:12 -07:00
..
app [SECURITY FIX] please update your pod ASAP 2012-07-02 10:00:12 -07:00
helpers Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
pages "twipsy" is now "tooltip", "position" must be "placement" and "select" is not a valid trigger 2012-04-15 02:02:12 +02:00
widgets new login page. kept the old one for safe keeping. 2012-05-19 11:10:17 -07:00
aspect-edit-pane.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
aspect-sorting.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
aspects-dropdown.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
bootstrap-scrollspy-custom.js add our changes back to bootstrap custom 2012-05-30 16:58:21 -07:00
clear-form.js Fix Jasmine tests - first pass 2012-03-27 18:08:27 -07:00
contact-edit.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
contact-list.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
diaspora.js use back-to-top initializer, fixes #2840 2012-05-02 00:03:07 +02:00
finder.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
friend-finder.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
home.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
ie.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
inbox.js Fix Jasmine tests - first pass 2012-03-27 18:08:27 -07:00
jasmine-load-all.js Fix Jasmine tests - first pass 2012-03-27 18:08:27 -07:00
login.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
mailchimp.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
main.js DG MS; added scrollspy wip 2012-05-30 16:58:21 -07:00
mentions.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
mobile.js add basic profile info to profile; remove random console.logs [ci skip] 2012-04-26 14:52:48 -07:00
people.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
photo-show.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
photos.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
profile.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
publisher.js bugmash #4 2012-05-24 19:50:39 -07:00
templates.js Move Javascript to the asset pipeline 2012-03-27 18:07:44 -07:00
validation.js DG RY; mostly done, validations pending [ci skip] 2012-05-04 17:38:07 -07:00
view.js Fix Jasmine tests - first pass 2012-03-27 18:08:27 -07:00