diaspora/app/assets/javascripts/widgets
Jonne Haß ecb1b80e24 Render flash message content with .text
.html does not escape any html input in these, leading to XSS
attack vectors.

Thanks to A Kai (@sixhundredns) for reporting the related issues.
2014-05-24 16:08:32 +02:00
..
back-to-top.js
direction-detector.js
flash-messages.js Render flash message content with .text 2014-05-24 16:08:32 +02:00
header.js
infinite-scroll.js
lightbox.js
notifications-badge.js
notifications.js Improve set read/unread in notifications dropdown 2014-04-16 23:33:22 +02:00
search.js
stream.js
timeago.js