Tim Abbott 6d0c39fd7e CVE-2020-14194: Use noopener/noreferrer for external links. ...

We fixed the main issue of this form in CVE-2020-9444, but the audit
done at that time only included links found in rendered_markdown; this
change completes our audit for links with target=_blank anywhere in
the codebase.

2020-06-16 23:16:05 -07:00

..

api

docs: Explain link sharing in /api/upload-file.

2019-12-02 12:01:46 -08:00

app

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

archive

templates: Fix missing quoting of attributes in HTML templates.

2020-06-16 23:12:41 -07:00

emails

emails: Use the word email instead of message in do not reply sentence.

2020-02-19 12:08:55 -08:00

for

for/open-source: Update the repo url of Zulip Archive.

2019-11-14 14:04:51 -08:00

help

help: Suggest restarting server during Slack import.

2020-05-12 22:17:06 -07:00

include

portico: Add return to login button to password reset end.

2019-11-18 12:21:40 -08:00

integrations

templates: Fix missing quoting of attributes in HTML templates.

2020-06-16 23:12:41 -07:00

tests/markdown

webhooks/freshdesk/doc.md: Remove unescape_rendered_html kludge.

2019-07-03 15:05:45 -07:00

accounts_accept_terms.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

accounts_home.html

context: Rename social_backends to external_authentication_methods.

2019-11-03 15:55:44 -08:00

accounts_send_confirm.html

refactor: Remove inline javascript code from accounts_send_confirm.html.

2019-03-25 15:14:24 -07:00

apps.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

atlassian.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

atlassian.md

…

base.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

billing_nav.html

…

compare.html

…

config_error.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

confirm_continue_registration.html

…

create_realm.html

templates: Replace focusing scripts with autofocus attribute.

2019-09-16 17:23:20 -07:00

deactivated.html

…

debug.html

…

dev_env_email_access_details.html

…

dev_login.html

auth: Accept next as POST parameter in POST requests.

2020-06-16 23:12:41 -07:00

dev_tools.html

scripts: Move inline-email-css from tools to scripts.

2019-11-15 17:39:42 -08:00

dev-not-supported-error.md

…

digest_base.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

documentation_main.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

email_log.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

email.html

…

faq.html

…

features.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

find_account.html

HTML validation: Fix login page HTML errors.

2019-07-18 11:56:15 -07:00

footer.html

…

for-companies.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

for-mystery-hunt.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

for-open-source.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

for-working-groups-and-communities.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

github-error.md

auth: Document setting social_auth_github_key in dev-secrets.

2019-06-14 10:16:26 -07:00

google-error.md

templates: Correct sample Google authorized redirect URI.

2019-12-30 10:23:43 -08:00

gradients.html

…

hello.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

history.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

insecure_desktop_app.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

invalid_email.html

…

invalid_realm.html

…

landing_nav.html

…

login.html

auth: Accept next as POST parameter in POST requests.

2020-06-16 23:12:41 -07:00

meta_tags.html

meta_tags: Remove twitter:title, twitter:description, twitter:image.

2019-05-16 21:19:08 -07:00

plans.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

portico_signup.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

portico-header-dropdown.html

…

portico-header.html

…

portico-help.html

…

portico.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

privacy.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

realm_creation_failed.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

realm_reactivation_link_error.html

…

realm_reactivation.html

…

realm_redirect.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

register.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

reset_confirm.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

reset_done.html

…

reset_emailed.html

portico: Add return to login button to password reset end.

2019-11-18 12:21:40 -08:00

reset.html

portico: Add return to login button to password reset end.

2019-11-18 12:21:40 -08:00

security.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

security.md

docs: Advertise SAML authentication as an official feature.

2019-10-29 16:55:22 -07:00

social_auth_select_email.html

auth: Style the GitHub auth email selection page.

2019-08-08 11:12:51 -07:00

team.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:16:05 -07:00

terms.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

unsubscribe_link_error.html

…

unsubscribe_success.html

…

why-zulip.html

templates: Use just one webpack entry point per page.

2019-10-28 15:53:15 -07:00

why-zulip.md

cleanup: Delete leading newlines.

2019-08-06 23:29:11 -07:00

zulipchat_migration_tos.html

…