Dan Brown ad542f0407

Prevented potential inline JS event usage ...

- Removes 'on*' attributes from elements.
- Also updated script logic to remove scripts instead of escaping.
- All JS injection removal now uses DomDocument + xpath parsing.

2019-05-05 13:53:37 +01:00

..

Auth

Merge branch 'fix/registraion-form-validation' of git://github.com/cw1998/BookStack into cw1998-fix/registraion-form-validation

2019-04-21 12:24:39 +01:00

Entity

Prevented potential inline JS event usage

2019-05-05 13:53:37 +01:00

Permissions

Aligned item creation wording and updated shelf-book-add logic

2019-04-15 20:45:04 +01:00

test-data

Prevent dbl exts. on img upload, Randomized attachment upload names

2019-03-24 19:08:21 +00:00

Uploads

Updated existing image tests to reflect changes

2019-05-04 18:11:19 +01:00

ActivityTrackingTest.php

…

BrowserKitTest.php

…

CommandsTest.php

…

CreatesApplication.php

…

ErrorTest.php

…

HelpersTest.php

…

HomepageTest.php

Updated tests to suit layout changes, Updated 404 page

2019-04-06 18:36:17 +01:00

LanguageTest.php

…

PublicActionTest.php

…

SharedTestHelpers.php

…

TestCase.php

…

TestResponse.php

…

UserPreferencesTest.php

Updated view toggle to store date

2019-04-14 13:01:51 +01:00

UserProfileTest.php

Updated tests to suit layout changes, Updated 404 page

2019-04-06 18:36:17 +01:00