Eric Allen 68701adaca Sanitize output well, but entity-ize < and > in notes ... Coming from a rich message or API call, notes can contain HTML and it will render to the browser. Coming from a normal todo creation, though, all < and > characters will be replaced with the corresponding entities. This preserves HTML emails, but prevents users from breaking the layout by entering broken HTML for todo notes. Closes #765		2010-04-07 10:06:46 -04:00
..
apis	add new_todo API call that specifies project_id, too	2009-04-01 03:59:10 +08:00
controllers	Manual apply fix from 1.7_branch. Preserve database integrity for recurring todos when deleting project or context. Fixes #880. Fixes #895	2010-04-04 18:20:07 +02:00
helpers	Sanitize output well, but entity-ize < and > in notes	2010-04-07 10:06:46 -04:00
models	Sanitize output well, but entity-ize < and > in notes	2010-04-07 10:06:46 -04:00
views	Dynamically load autocompletes	2010-04-02 13:24:21 -04:00