Commit Graph
3 Commits
Author SHA1 Message Date
Gusted f32de0a97c Prevent possible XSS when using jQuery (#18289)
In the case of misuse or misunderstanding from a developer whereby,
if `sel` can receive user-controlled data, jQuery `$(sel)` can lead to the
creation of a new element. Current usage is using hard-coded selectors
in the templates, but nobody prevents that from expanding to
user-controlled somehow.
2022-01-16 13:14:32 +08:00
Gusted f1645c4792 Enable partial clone by default (#18195)
- Enable partial clones(which are by default disabled from git) by
default, unless configured otherwise.
- Resolves #18190
2022-01-06 06:38:38 +01:00
Gusted 850e0088f1 Add MP4 as default allowed attachment type (#18170) 2022-01-04 04:36:47 +01:00