mirror of
https://github.com/zulip/zulip.git
synced 2025-11-02 13:03:29 +00:00
6d0c39fd7e
We fixed the main issue of this form in CVE-2020-9444, but the audit done at that time only included links found in rendered_markdown; this change completes our audit for links with target=_blank anywhere in the codebase.
27 lines
1.2 KiB
HTML
27 lines
1.2 KiB
HTML
<div id="lightbox_overlay" class="overlay new-style" data-overlay="lightbox">
|
|
<div class="image-info-wrapper">
|
|
<div class="image-description">
|
|
<div class="title"></div>
|
|
<div class="user"></div>
|
|
</div>
|
|
<div class="exit" aria-label="{{ _('Close') }}"><span aria-hidden="true">x</span></div>
|
|
<div class="image-actions">
|
|
<div class="lightbox-canvas-trigger">
|
|
<div class="title">{{ _('Pan & Zoom') }}</div>
|
|
<div class="status" data-disabled="{{ _('Disabled') }}" data-enabled="{{ _('Enabled') }}"></div>
|
|
</div>
|
|
<a class="button small open" rel="noopener noreferrer" target="_blank">{{ _('Open') }}</a>
|
|
<a class="button small download" download>{{ _('Download') }}</a>
|
|
</div>
|
|
<div class="clear-float"></div>
|
|
</div>
|
|
|
|
<div class="image-preview overlay-content no-select"></div>
|
|
<div class="player-container"></div>
|
|
<div class="center">
|
|
<div class="arrow no-select" data-direction="prev"><</div>
|
|
<div class="image-list"></div>
|
|
<div class="arrow no-select" data-direction="next">></div>
|
|
</div>
|
|
</div>
|