Jacques Distler
|
5ff1b7f6da
|
XSS Security Fix
There was a XSS vulnerability in the handling of categories. Now they are escaped.
|
2007-09-02 00:33:28 -05:00 |
|
|
Jacques Distler
|
3de374d6c1
|
More fixes, sync with HTML5lib
Do a better job with the wrapper <div>s added by xhtmldiff and Maruku's to_html_tree method.
More tests fixed.
|
2007-06-13 23:05:15 -05:00 |
|
|
Jacques Distler
|
3ca33e52b5
|
Cleanup
Got rid of redcloth_for_tex.
Fixed almost all the busted tests.
|
2007-06-13 01:56:44 -05:00 |
|
|
Jacques Distler
|
f0cf0ec625
|
Sanitize REML trees
OK. Enabled sanitization of rexml trees instead of strings.
My timing tests seem to be erratic. Can't tell whether this is really faster.
|
2007-06-05 17:13:44 -05:00 |
|
|
Jacques Distler
|
bd8ba1f4b1
|
REXML Trees
Synced with latest HTML5lib.
Added preliminary support (currently disabled) for sanitizing REXML trees.
|
2007-06-05 16:34:49 -05:00 |
|
|
Jacques Distler
|
6b21ac484f
|
HTML5lib Sanitizer
Replaced native Sanitizer with HTML5lib version.
Synced with latest Maruku.
|
2007-05-25 20:52:27 -05:00 |
|
|
Jacques Distler
|
0db06a9fa3
|
To be really XML-safe, don't emit XHTML+MathML named entities. (Ported MathML::Entities to Ruby.)
|
2007-03-29 03:30:10 -05:00 |
|
|
Jacques Distler
|
bacae2c468
|
Finally! XSS-protection, done right.
If you want something done right, ...
|
2007-02-22 01:06:53 -06:00 |
|
|
Jacques Distler
|
0aafedb2df
|
More XSS fixes.
Started fixing file uploads.
|
2007-02-21 12:10:47 -06:00 |
|
|
Jacques Distler
|
88c6f27e14
|
Bah! *Someone* will care about those other Text-filters.
|
2007-02-20 08:18:48 -06:00 |
|
|
Jacques Distler
|
e727507ac8
|
Zap gremlins.
Close cross-site scripting hole.
|
2007-02-19 23:15:39 -06:00 |
|
|
Jacques Distler
|
fc15848517
|
Configure equation-numbering as we like it.
|
2007-02-14 22:19:37 -06:00 |
|
|
Jacques Distler
|
ff63e894b2
|
Sync with latest Maruku.
Finally able to ditch BlueCloth completely.
|
2007-02-14 20:32:24 -06:00 |
|
|
Jacques Distler
|
b19e1e4f47
|
Bring up to current.
|
2007-01-22 08:36:51 -06:00 |
|
|
Jacques Distler
|
69b62b6f33
|
Checkout of Instiki Trunk 1/21/2007.
|
2007-01-22 07:43:50 -06:00 |
|