wekan/client/components
Lauri Ojansivu 482682e500 SECURITY VULNERABILITY FIX: Fix XSS bug reported today 4 hours ago by Cyb3rjunky.
Logged in users could run javascript in input fields.
This affects Wekan versions v3.12-v3.84.
In [Wekan v3.12](https://github.com/wekan/wekan/blob/master/CHANGELOG.md#v312-2019-08-09-wekan-release)
there was [changes for XSS filter to allow inserting images, videos etc
on comment WYSIWYG editor](https://github.com/wekan/wekan/pull/2593)
so features related to that are now removed.
After this fix, Javascript in input fields is not executed.

Thanks to Cyb3rjunky and xet7 !
2020-03-23 22:29:20 +02:00
..
activities Remove hiding comments and activities. 2020-02-10 17:25:27 +02:00
boards Try to disable dragging Swimlanes/Lists/Cards/Checklists/Subtasks on small mobile smartphones webbrowsers, and hide drag handles on mobile web. 2020-02-07 03:16:16 +02:00
cards Remove card element grouping to create compact card layout. 2020-02-12 02:08:29 +02:00
forms - Fix missing dropdown arrow on Chrome. Thanks to xet7 ! Closes #1964 2018-10-24 12:40:40 +03:00
import Fixes #2638 importing trello 2019-08-22 16:05:41 -05:00
lists Try to fix afterwards loading of cards by adding 2020-02-22 16:32:54 +02:00
main SECURITY VULNERABILITY FIX: Fix XSS bug reported today 4 hours ago by Cyb3rjunky. 2020-03-23 22:29:20 +02:00
mixins Prettier & eslint project style update 2019-06-28 12:56:51 -05:00
rules Customize of some card's functions 2020-02-04 02:28:45 -08:00
settings - Fix critical and moderate security vulnerabilities reported at 2020-02-26 with 2020-03-01 20:59:53 +02:00
sidebar - Fix critical and moderate security vulnerabilities reported at 2020-02-26 with 2020-03-01 20:59:53 +02:00
swimlanes Try to disable dragging Swimlanes/Lists/Cards/Checklists/Subtasks on small mobile smartphones webbrowsers, and hide drag handles on mobile web. 2020-02-07 03:16:16 +02:00
users Add Worker role. 2020-01-05 21:28:14 +02:00