Jean-Philippe Lang 4f2c5a9945 Filter arbitrary class names and ids in rendered HTML output (#25503). ...

* Disallow setting arbitrary classes and ids via Textile syntax
* Only allow valid/supported languages for syntax highlighted code blocks

Patch by Jan Schulz-Hofen.

git-svn-id: http://svn.redmine.org/redmine/trunk@16502 e93f8b46-1217-0410-a6f0-8f06a7374b81

2017-04-06 16:41:52 +00:00

..

coverage

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

extra/redmine_pm

Check that repository module is enabled (#24307).

2017-01-29 08:53:41 +00:00

fixtures

Reset status when copying issues (#23610).

2017-04-03 10:30:29 +00:00

functional

Better handling of update failures when bulk editing time entries.

2017-04-04 17:22:08 +00:00

integration

Adds a test for #25526.

2017-04-05 16:10:16 +00:00

mocks

Fixed: Openid registration form should not require user to enter password (#11331).

2012-07-07 06:22:35 +00:00

ui

Better handling of update failures when bulk editing time entries.

2017-04-04 17:22:08 +00:00

unit

Filter arbitrary class names and ids in rendered HTML output (#25503).

2017-04-06 16:41:52 +00:00

object_helpers.rb

use symbol instead of string for 'position' (#24013)

2016-11-28 05:54:14 +00:00

test_helper.rb

Cleanup tests with mock files.

2017-04-03 12:48:58 +00:00