zulip

mirror of https://github.com/zulip/zulip.git synced 2025-11-03 05:23:35 +00:00

Files

Tim Abbott a2767e8c50 CVE-2020-14194: Use noopener/noreferrer for external links.

We fixed the main issue of this form in CVE-2020-9444, but the audit
done at that time only included links found in rendered_markdown; this
change completes our audit for links with target=_blank anywhere in
the codebase.

2020-06-16 23:35:39 -07:00

api

api changelog: Document recent major markdown features.

2020-06-16 16:44:39 -07:00

app

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

archive

templates: Fix missing quoting of attributes in HTML templates.

2020-06-16 23:35:39 -07:00

emails

i18n: Don't hardcode zulip.com URLs in translation tags.

2020-06-11 11:09:42 -07:00

for

portico: Remove mystery hunt landing page.

2020-06-08 18:10:45 -07:00

help

realm: Remove Google Hangouts integration.

2020-06-16 17:02:27 -07:00

include

…

integrations

templates: Fix missing quoting of attributes in HTML templates.

2020-06-16 23:35:39 -07:00

tests/markdown

…

accounts_accept_terms.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

accounts_home.html

auth: Add Sign in with Apple support.

2020-06-09 17:29:35 -07:00

accounts_send_confirm.html

…

apple-error.md

auth: Add Sign in with Apple support.

2020-06-09 17:29:35 -07:00

apps.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

atlassian.html

…

atlassian.md

docs: Update URLs to use https://zulip.com .

2020-06-08 18:10:45 -07:00

base.html

base: Fix jinja2.exceptions.UndefinedError on Python ≥ 3.7.

2020-04-18 05:35:51 -07:00

billing_nav.html

…

close_window.html

compose: Rewrite Zoom video call integration to use OAuth.

2020-06-03 16:39:12 -07:00

compare.html

…

config_error.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

confirm_continue_registration.html

templates: Use <hr> and   consistently.

2020-04-28 17:05:48 -07:00

confirmation_link_expired_error.html

invitations: Revoke remaining invitations after user registers.

2020-05-27 15:37:16 -07:00

create_realm.html

…

deactivated.html

…

desktop_login.html

desktop-login: Use zulip design styles for desktop-login.

2020-05-10 23:05:19 -07:00

desktop_redirect.html

desktop-login: Use zulip design styles for desktop-login.

2020-05-10 23:05:19 -07:00

dev_env_email_access_details.html

…

dev_login.html

dev_login: Move owners to the top.

2020-06-08 17:26:34 -07:00

dev_tools.html

templates: Use <hr> and   consistently.

2020-04-28 17:05:48 -07:00

dev-not-supported-error.md

…

digest_base.html

…

documentation_main.html

templates: Use <hr> and   consistently.

2020-04-28 17:05:48 -07:00

email_log.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

email.html

templates: Use <hr> and   consistently.

2020-04-28 17:05:48 -07:00

faq.html

docs: Update most remaining references to zulipchat.com.

2020-06-08 18:10:45 -07:00

features.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

find_account.html

…

footer.html

help: Add article for how to get support.

2020-05-04 09:38:36 -07:00

for-companies.html

…

for-open-source.html

templates: Use <hr> and   consistently.

2020-04-28 17:05:48 -07:00

for-research.html

portico: Add first a quote to /for/research.

2020-05-20 17:47:01 -07:00

for-working-groups-and-communities.html

…

github-error.md

…

gitlab-error.md

…

google-error.md

capitalization: Fix OAuth capitalization.

2020-06-03 16:39:12 -07:00

gradients.html

…

hello.html

portico: Use green btn for call-to-action-bottom button.

2020-05-27 16:30:03 -07:00

history.html

docs: Update URLs to use https://zulip.com .

2020-06-08 18:10:45 -07:00

insecure_desktop_app.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

invalid_email.html

…

invalid_realm.html

templates: Use <hr> and   consistently.

2020-04-28 17:05:48 -07:00

landing_nav.html

landing: Fix responsive styling for navbar custom messages.

2020-05-26 22:58:02 -07:00

log_into_subdomain_token_invalid.html

auth: Show a user-facing page when wrong token given to /subdomain/.

2020-04-05 12:29:09 -07:00

auth: Add Sign in with Apple support.

2020-06-09 17:29:35 -07:00

meta_tags.html

…

plans.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

portico_signup.html

…

portico-header-dropdown.html

…

portico-header.html

…

portico-help.html

…

portico.html

…

privacy.html

…

realm_creation_failed.html

i18n: Don't hardcode zulip.com URLs in translation tags.

2020-06-11 11:09:42 -07:00

realm_reactivation_link_error.html

…

realm_reactivation.html

…

realm_redirect.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

reset_confirm.html

forms: Show user.delivery_email in password reset form.

2020-03-30 16:41:46 -07:00

reset_done.html

…

reset_emailed.html

…

reset.html

…

security.html

…

security.md

users: Owners can only be deactivated by other organization owners.

2020-06-10 17:33:02 -07:00

social_auth_select_email.html

auth: Extend the template for "choose email" in GitHub auth flow.

2020-05-02 14:30:31 -07:00

team.html

CVE-2020-14194: Use noopener/noreferrer for external links.

2020-06-16 23:35:39 -07:00

terms.html

…

unsubscribe_link_error.html

…

unsubscribe_success.html

…

unsupported_browser.html

i18n: Don't hardcode zulip.com URLs in translation tags.

2020-06-11 11:09:42 -07:00

why-zulip.html

…

why-zulip.md

…

zulipchat_migration_tos.html

docs: Update most remaining references to zulipchat.com.

2020-06-08 18:10:45 -07:00