Jeff Arnold 88348a8dc7 Prevent XSS vulnerability by avoiding treating message text as HTML ...

Addresses #1205

(imported from commit 229c65ae48d509bf3b71ed7cbfcc1fbeb60d14c5)

2013-04-25 17:33:04 -04:00

..

activity.js

Send client information for initial presence and process time differential

2013-04-12 09:11:40 -04:00

api.js

Rework API documentation to cover all supported calls.

2013-04-18 09:57:56 -07:00

blueslip.js

blueslip: Fix BlueslipError definition

2013-04-22 16:04:51 -04:00

colorspace.js

Use white text for recipient labels on streams set to dark colors

2013-02-19 15:33:35 -05:00

common.js

Accept any password with at least 6 characters

2013-04-10 18:05:02 -04:00

compose.js

Make text-underneath-compose-box all nicely line up together.

2013-04-24 17:49:45 -04:00

composebox_typeahead.js

Move "page parameters" (email, enter_sends, etc) into a single object

2013-03-26 13:50:03 -04:00

debug.js

Remove verbose_stacktrace function. Use console.trace instead

2013-03-11 13:22:12 -04:00

hashchange.js

Don't trigger two events when our app changes the hash

2013-04-23 16:13:26 -04:00

hotkey.js

hotkeys: fix assumptions that message lists are non-empty.

2013-04-10 16:36:11 -04:00

invite.js

invites: correctly focus on the email textarea once the modal is visible.

2013-04-10 16:58:17 -04:00

message_list.js

Use '===' instead of '==' to make the linter happy.

2013-04-24 10:32:30 -04:00

narrow.js

Store the recipient stream name in message.stream.

2013-04-22 11:14:03 -04:00

notifications_bar.js

Unify calculation of unread-count for notifications and use it in the title bar

2013-03-20 10:09:40 -04:00

notifications.js

Store the recipient stream name in message.stream.

2013-04-22 11:14:03 -04:00

reload.js

Rename message content option to compose.start to content.

2013-04-22 11:14:03 -04:00

rows.js

Remove global selected_message_id and persistent_message_id variables

2013-02-21 13:29:17 -05:00

search.js

Move "page parameters" (email, enter_sends, etc) into a single object

2013-03-26 13:50:03 -04:00

setup.js

Add a password strength check on the settings page

2013-04-10 18:05:01 -04:00

signup.js

Add password strength checks to password reset

2013-04-10 18:05:02 -04:00

subs.js

Remove double subscription when "creating" stream

2013-04-24 16:21:14 -04:00

templates.js

Append timestamp to URLs when getting templates on dev machines.

2013-04-05 10:38:38 -04:00

timerender.js

Do just in time calculation of full date and time for messages

2013-03-05 12:48:33 -05:00

tutorial.js

Restore tutorial's ability to see what you send.

2013-04-24 10:35:25 -04:00

typeahead_helper.js

Handle realm_user events in web client

2013-04-01 13:07:48 -04:00

ui.js

Prevent XSS vulnerability by avoiding treating message text as HTML

2013-04-25 17:33:04 -04:00

util.js

Store the recipient stream name in message.stream.

2013-04-22 11:14:03 -04:00

zephyr.js

Avoid an unnecessary load_old_messages call on page load.

2013-04-24 10:44:56 -04:00