Eric Allen 68701adaca Sanitize output well, but entity-ize < and > in notes ... Coming from a rich message or API call, notes can contain HTML and it will render to the browser. Coming from a normal todo creation, though, all < and > characters will be replaced with the corresponding entities. This preserves HTML emails, but prevents users from breaking the layout by entering broken HTML for todo notes. Closes #765		2010-04-07 10:06:46 -04:00
..
context.rb	Manual apply fix from 1.7_branch. Preserve database integrity for recurring todos when deleting project or context. Fixes #880. Fixes #895	2010-04-04 18:20:07 +02:00
dependency.rb	Conflicts:	2009-11-04 22:31:17 -05:00
message_gateway.rb	Support dispatching emailed-in todos based on To: field as well as From: field. Setting configured in site.yml.	2009-03-29 19:44:43 -04:00
note.rb	Removed outer tracks directory.	2008-05-24 15:57:18 +01:00
preference.rb	fix #856 where DateTimes supplied through the rest api was not converted to the users timezone	2009-03-24 23:05:23 +01:00
project.rb	Manual apply fix from 1.7_branch. Preserve database integrity for recurring todos when deleting project or context. Fixes #880. Fixes #895	2010-04-04 18:20:07 +02:00
recurring_todo.rb	Manual apply fix from 1.7_branch. Preserve database integrity for recurring todos when deleting project or context. Fixes #880. Fixes #895	2010-04-04 18:20:07 +02:00
tag.rb	fix tags and fix tests	2008-12-22 23:26:38 +01:00
tagging.rb	remove unused and unneccesary user_id from taggings table.	2009-01-08 10:18:03 +01:00
todo.rb	Sanitize output well, but entity-ize < and > in notes	2010-04-07 10:06:46 -04:00
user.rb	This allows CAS to work side by side with other Auth methods.	2010-01-12 17:17:56 -08:00