This filters out potentially malicious javascript: or data: uri's coming
through to be attached to attachments.
Added tests to cover.
Thanks to Yassine ABOUKIR (@yassineaboukir on twitter) for reporting this
vulnerability.
- Created new dropzone component.
- Added standard component event system using custom DOM events.
- Added tabs component.
- Added ajax-delete-row component.
- Moved Code-editor from vue to component.
- Updated popup code so it background click only hides if the click
originated on the same background. Clicks within the popup will no
longer cause it to hide.
- Added session-level history tracking to code editor.
- Intended to prevent enumeration to check if a user exists.
- Updated messages on both the reqest-reset and set-password elements.
- Also updated notification auto-hide to be dynamic based upon the
amount of words within the notification.
- Added tests to cover.
For #2016
- Moved list to the left of the page to align with other navigational
items.
- Hid list of no shelves, to help hide shelf references if not in use.
- Tweaked test to ensure it wasn't finding shelf name in breadcrumb
rather than list being tested.
Squashed commit of the following:
commit 23861a31bb2398ca61655c584bd8c75ee9bccdad
Merge: d44acf4b 1c6287f2
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 22:18:50 2020 +0000
Merge branch 'master' into l10n_master
commit d44acf4b6413f2b99f3915e26286228956def114
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 19:39:46 2020 +0000
New translations errors.php (Portuguese, Brazilian)
commit c1a4cc5d1257ca602bb0292e7abbac63dacb8e55
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 19:14:49 2020 +0000
New translations errors.php (Spanish, Argentina)
commit fb3c5dcffcb05e5b30da1fa4e6c9ab31b1a33fd1
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 19:14:48 2020 +0000
New translations errors.php (Spanish)
commit f65c84635d610cdb90465f4aab12f6a78ef70ac9
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:42:05 2020 +0000
New translations errors.php (German Informal)
commit 99fba6932a5307341fd5eb883a89235f71742f18
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:57 2020 +0000
New translations errors.php (French)
commit bc4c9684b538bad80741c107fee4547de9e8ffa9
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:55 2020 +0000
New translations errors.php (Portuguese, Brazilian)
commit 0afce798070f95b8d1b421caf126fdea5fd0b749
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:43 2020 +0000
New translations errors.php (Russian)
commit f3daf77b955a07913566f5746050409c269daba9
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:41 2020 +0000
New translations errors.php (Hungarian)
commit 63848278a5d0ad3e6da1bbf1829447b39ec44246
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:40 2020 +0000
New translations errors.php (Italian)
commit 53b5fce93c8888271b2a32564532cb01bc92f25c
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:38 2020 +0000
New translations errors.php (Japanese)
commit 2638f7a66336bc0ce52e9ab4f0fd35cd16b513da
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:37 2020 +0000
New translations errors.php (Korean)
commit f19ffa468ce79876972e12dcf54ab1f0eceaa67c
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:36 2020 +0000
New translations errors.php (Persian)
commit 477ae0b84528499ab79c1bc73b0fb9dc465c0b3f
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:34 2020 +0000
New translations errors.php (Polish)
commit 56beebe12cbcc9c4796dc7dd07092d43332d8448
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:33 2020 +0000
New translations errors.php (German)
commit 2b6540654a53508b2e42d93eefc9b0400a942bfe
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:32 2020 +0000
New translations errors.php (Portuguese)
commit 80f727501187b4ae9b614a13af1e707c9c83ff53
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:30 2020 +0000
New translations errors.php (Spanish)
commit 74c65f90abd66650bafcc5d2c4d70b47d5b195e2
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:28 2020 +0000
New translations errors.php (Spanish, Argentina)
commit 3bd9e4fb86891b4067955ff02ba4f47f13a4401c
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:27 2020 +0000
New translations errors.php (Swedish)
commit a698db00e3ded739152e26c05d6d24f36a2cad0e
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:26 2020 +0000
New translations errors.php (Turkish)
commit f3cfc63b5cda1202547da42f594c1080305fa7e9
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:25 2020 +0000
New translations errors.php (Ukrainian)
commit 61eb76ac89d584ae0ac84d15ae17dfc380c04fe4
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:23 2020 +0000
New translations errors.php (Vietnamese)
commit cfda94e2a8d9d8fbed837daaccf1920714b51c56
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:22 2020 +0000
New translations errors.php (Slovak)
commit f0659025a96f18f2aef1fecb34aba44577a0fadc
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:20 2020 +0000
New translations errors.php (Dutch)
commit 27ac377ed6f1687dbcc9a67ade5c233b992bfa2b
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:19 2020 +0000
New translations errors.php (Chinese Traditional)
commit 04bf21a325d02588ea45ab15c5b3aa0ad5698ae7
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:18 2020 +0000
New translations errors.php (Chinese Simplified)
commit 4dd5802979cd4dc1cb5b44d60b8d8e317260b939
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:16 2020 +0000
New translations errors.php (Arabic)
commit 368cf2d24866a5a728563159e194b580b1d11c86
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:11 2020 +0000
New translations errors.php (Slovenian)
commit 52381df7befc102cd367b0e1766f5b307a2c9a0c
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:08 2020 +0000
New translations errors.php (Czech)
commit 7e8330510f5875f1cb45bfc6f1fe555037d8299f
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 14 18:41:07 2020 +0000
New translations errors.php (Danish)
commit 1bf07c6acfb4df5334251b60e73dcadd4cac7a21
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 22:57:41 2020 +0000
New translations entities.php (Slovenian)
commit 4d2d120b5710743535af61a1191da5645425512d
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 22:27:35 2020 +0000
New translations entities.php (Slovenian)
commit edfc88eb8e8ce29d87c0a313513ad18a5dc92fc5
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 21:55:51 2020 +0000
New translations entities.php (Slovenian)
commit 840ed35d34cda522d77d092f39c6e4060bd84163
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 21:22:08 2020 +0000
New translations entities.php (Slovenian)
commit aa130af2858464056bbce1eef0ed9da3bc0f5471
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 14:02:50 2020 +0000
New translations common.php (Czech)
commit 5007fee528c498ed127c2dd4f3a0cc09eaa2c1cb
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 14:02:25 2020 +0000
New translations entities.php (Slovenian)
commit 1ad8874e6b02586e77d79234070c728eaa4a72c3
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 13:30:21 2020 +0000
New translations auth.php (Czech)
commit 56f17ff7d4f359a187bd6c7015ec9193a4025aa1
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 13:29:57 2020 +0000
New translations entities.php (Slovenian)
commit 33789962cceabc36a66d9374c3e1ea16c1567296
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 11:09:18 2020 +0000
New translations components.php (Slovenian)
commit 1002cf9e3b77aeebbf8dded48264418110ad3b90
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 10:08:48 2020 +0000
New translations components.php (Slovenian)
commit d5a6083ae8f4123dec1ae89acb8e7809d96a6149
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 09:37:23 2020 +0000
New translations components.php (Slovenian)
commit 0d8df3a72ebedba317c73442b5e16f768c0e8ee3
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 09:07:01 2020 +0000
New translations components.php (Slovenian)
commit 22337688f9df3828333c4886235ea7a24030bc8b
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 09:07:00 2020 +0000
New translations common.php (Slovenian)
commit ff812694e2c6a360af66dfaf72e44d729a39b6ae
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 08:20:44 2020 +0000
New translations common.php (Slovenian)
commit 57b9e049274cbc3d7a3bd34a9eb473da59280e35
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 06:17:11 2020 +0000
New translations auth.php (Spanish)
commit 25343baac104ec6b3cdb141cfa4e04a113dbd0a7
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 06:16:52 2020 +0000
New translations activities.php (Spanish)
commit a5c72ee5f1db378ad7c6258ad62fadab50c7e2b6
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Wed Mar 11 05:37:55 2020 +0000
New translations activities.php (Spanish)
commit 6a6f28d095cda60484e8f63b3b1b293ca21b6751
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 15:49:14 2020 +0000
New translations auth.php (Slovenian)
commit 33f30876e107bc3d3685483c5f53c0de02286c79
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 15:18:30 2020 +0000
New translations auth.php (Slovenian)
commit 8bf8bc0fe5f9de724d947c63cc2a765a7655597b
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 14:48:46 2020 +0000
New translations auth.php (Slovenian)
commit 303dc0770430e57c82484acbea00f186af286ca4
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 14:48:44 2020 +0000
New translations activities.php (Slovenian)
commit c219fb67aaf8ab1c3ce0d74fb593ec2c3bcea81a
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 09:59:45 2020 +0000
New translations activities.php (Slovenian)
commit f45b6c6c828c8a973bcbe18305f3db97f7e6a8d3
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 08:34:32 2020 +0000
New translations activities.php (Slovenian)
commit 7d690eb13f59859937e1bcebe7335269633f0d39
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 02:56:48 2020 +0000
New translations entities.php (Russian)
commit 86aab0529e776dc5ec203d637faea99c3b9ae2e3
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Tue Mar 10 02:56:43 2020 +0000
New translations common.php (Russian)
commit 4fc19455439c22522beffdf2a55f45eedd7f1c55
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 20:37:26 2020 +0000
New translations errors.php (Russian)
commit 09791b736d76a45be93313f9dc52e2eb950ceecc
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 20:07:52 2020 +0000
New translations settings.php (Russian)
commit 9cb04bea4c78ee26dbfb98667d758cdd19cd881d
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:50 2020 +0000
New translations validation.php (Slovenian)
commit 7964a5a2a09b160bc57a6fc0e7f3aac0cda4b4fa
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:34 2020 +0000
New translations settings.php (Slovenian)
commit 361be13ff79a1d650d56181db82682ace7c92cf7
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:32 2020 +0000
New translations passwords.php (Slovenian)
commit 9b6a7f0f648598b259e9f5667845d9d8e4a0ee91
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:31 2020 +0000
New translations pagination.php (Slovenian)
commit a815adc24fddded3c3e11c506c9cf8180710e367
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:30 2020 +0000
New translations errors.php (Slovenian)
commit ae6040af3aeaa116fbd2b331c627044257870979
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:28 2020 +0000
New translations entities.php (Slovenian)
commit f1d0177dce08012b8e93b86e95bc1d3e2930341d
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:26 2020 +0000
New translations components.php (Slovenian)
commit 16ba9f1fe1d28fb335adafc6f2937ae03e6fed28
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:24 2020 +0000
New translations common.php (Slovenian)
commit caa47464ba5b88bfafdacc58ca7eae9a554b02cb
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:23 2020 +0000
New translations auth.php (Slovenian)
commit 4b9a78aef86eb4b59b60df66072904c5ab9ba7e3
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Mon Mar 9 18:49:21 2020 +0000
New translations activities.php (Slovenian)
commit 6a55161fe9b48269be1fff6b4aa881a393738bbe
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sun Mar 8 01:36:31 2020 +0000
New translations common.php (French)
commit 94235393fa72afbca1784376d0a459232a5ff7b5
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 7 18:49:01 2020 +0000
New translations errors.php (Portuguese, Brazilian)
commit a0f75e772410b3ff029b722af9a49ed14c971963
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 7 10:24:26 2020 +0000
New translations settings.php (Russian)
commit 65437712a2036c7341a0050ec1891d92e9fddc77
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 7 09:37:34 2020 +0000
New translations auth.php (Russian)
commit f7f6a92dcf6380ada2d027cb17c5132970f0018d
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 7 00:01:07 2020 +0000
New translations entities.php (Russian)
commit ac8819edd3ad216bd8ff756bf45e5ca78a0d1c96
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Sat Mar 7 00:00:57 2020 +0000
New translations settings.php (Russian)
commit f1290f2b87804978e6ba42b4519a38e449c28881
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Fri Mar 6 23:23:44 2020 +0000
New translations entities.php (Russian)
commit 8efb9bd571a06dc9736b845d607e8b4d1e194ad4
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Fri Mar 6 22:45:53 2020 +0000
New translations entities.php (Russian)
commit 4fd31df14e373931c4ab06adf11189afac4ba288
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Fri Mar 6 22:45:44 2020 +0000
New translations settings.php (Russian)
commit 262a2b3e4edb31baccde3f5ca94fa4e6c7804eb7
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Fri Mar 6 22:11:41 2020 +0000
New translations entities.php (Russian)
commit 15c98a64b831a7a3b832ee3503a4e1e5da3b5935
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Fri Mar 6 15:10:54 2020 +0000
New translations errors.php (French)
commit 7a274db381ae65a5084e86777f283217827d98af
Author: Dan Brown <ssddanbrown@googlemail.com>
Date: Fri Mar 6 15:10:43 2020 +0000
New translations settings.php (French)
- Updated logic to take url from referrer rather than pass as a query parameter.
- Added tests to cover functionality.
- Updated 404 page with login action button if not signed in.
- Updated 404 page with text to indicate permissions may be affecting visibility.
Related to #1817 and #1706
