Jean-Philippe Lang 4f2c5a9945 Filter arbitrary class names and ids in rendered HTML output (#25503). ...

* Disallow setting arbitrary classes and ids via Textile syntax
* Only allow valid/supported languages for syntax highlighted code blocks

Patch by Jan Schulz-Hofen.

git-svn-id: http://svn.redmine.org/redmine/trunk@16502 e93f8b46-1217-0410-a6f0-8f06a7374b81

2017-04-06 16:41:52 +00:00

..

generators

Code cleanup (#24007).

2016-11-18 12:20:10 +00:00

plugins

spelling fixes (#25495)

2017-04-02 03:34:44 +00:00

redmine

Filter arbitrary class names and ids in rendered HTML output (#25503).

2017-04-06 16:41:52 +00:00

SVG

spelling fixes (#25495)

2017-04-02 03:34:44 +00:00

tasks

Adds a rake task to update attachments digests to SHA256 (#25240).

2017-04-03 11:38:06 +00:00

diff.rb

fix source indents of lib/diff.rb

2012-04-03 15:20:39 +00:00

redmine.rb

Don't render memberships forms, use #edit instead.

2017-01-07 10:26:36 +00:00