Jean-Philippe Lang 4f2c5a9945 Filter arbitrary class names and ids in rendered HTML output (#25503). ...

* Disallow setting arbitrary classes and ids via Textile syntax
* Only allow valid/supported languages for syntax highlighted code blocks

Patch by Jan Schulz-Hofen.

git-svn-id: http://svn.redmine.org/redmine/trunk@16502 e93f8b46-1217-0410-a6f0-8f06a7374b81

2017-04-06 16:41:52 +00:00

..

helpers

Filter arbitrary class names and ids in rendered HTML output (#25503).

2017-04-06 16:41:52 +00:00

initializers

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

lib

Filter arbitrary class names and ids in rendered HTML output (#25503).

2017-04-06 16:41:52 +00:00

activity_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

attachment_test.rb

Adds a test for when the file comparison fails (#25215).

2017-04-03 12:51:13 +00:00

attachment_transaction_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

auth_source_ldap_test.rb

revert r16322 (#24970)

2017-02-02 03:01:19 +00:00

board_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

changeset_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

comment_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

custom_field_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

custom_field_user_format_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

custom_field_version_format_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

custom_value_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

default_data_test.rb

Skip workflow creation in tests for each locale.

2016-12-31 12:53:38 +00:00

document_category_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

document_test.rb

remove empty line including trailing white space from test/unit/document_test.rb

2017-03-20 17:46:38 +00:00

enabled_module_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

enumeration_test.rb

Removes #move_to= (#12909).

2016-04-18 18:38:03 +00:00

group_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

issue_category_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

issue_custom_field_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

issue_import_test.rb

Allow forward reference to parent when importing issues (#22701).

2017-01-21 09:08:40 +00:00

issue_nested_set_concurrency_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

issue_nested_set_test.rb

Adds .rebuild_single_tree! to rebuild a single tree (#24167).

2016-12-21 10:35:36 +00:00

issue_priority_test.rb

Removes #move_to= (#12909).

2016-04-18 18:38:03 +00:00

issue_relation_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

issue_scopes_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

issue_status_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

issue_subtasking_test.rb

Prevent parent issue from being closed if a child issue is open (#10989).

2016-12-21 09:09:22 +00:00

issue_test.rb

Reset status when copying issues (#23610).

2017-04-03 10:30:29 +00:00

issue_transaction_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

journal_observer_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

journal_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

mail_handler_test.rb

Changes the digest used for attachments to SHA256 (#25240).

2017-04-03 11:11:36 +00:00

mailer_test.rb

Enforce issue assignee validation (#23921).

2016-12-10 12:02:37 +00:00

member_test.rb

Adds a test for #25289.

2017-03-08 20:36:22 +00:00

message_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

news_test.rb

Don't pass conditions to #delete_all.

2016-07-16 10:30:45 +00:00

principal_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

project_copy_test.rb

Time entry queries should be copied and deleted too.

2017-01-31 18:15:32 +00:00

project_members_inheritance_test.rb

Use .distinct instead of .uniq.

2016-07-14 07:15:13 +00:00

project_nested_set_concurrency_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

project_nested_set_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

project_test.rb

Test failures.

2017-03-03 17:17:50 +00:00

query_test.rb

Get rid of sort_helper when using queries.

2017-03-13 19:17:59 +00:00

repository_bazaar_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

repository_cvs_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

repository_darcs_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

repository_filesystem_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

repository_git_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

repository_mercurial_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

repository_subversion_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

repository_test.rb

Be more conservative when fetching constants in Repository.factory (#23758).

2016-09-04 17:10:12 +00:00

role_test.rb

Role#copy_from should copy managed roles.

2016-10-20 17:00:04 +00:00

search_test.rb

remove empty lines including trailing white space from test/unit/search_test.rb

2017-02-16 05:49:08 +00:00

setting_test.rb

remove trailing white space from test/unit/setting_test.rb

2017-02-12 14:09:07 +00:00

time_entry_activity_test.rb

remove empty lines including trailing white space from test/unit/time_entry_activity_test.rb

2017-02-21 11:03:39 +00:00

time_entry_query_test.rb

Test failures.

2017-03-03 17:17:50 +00:00

time_entry_test.rb

Test failure.

2017-01-14 11:33:51 +00:00

token_test.rb

Allow "stay logged in" from multiple browsers (#10840).

2017-01-12 20:34:08 +00:00

tracker_test.rb

Don't use assert_equal nil.

2016-12-12 21:36:14 +00:00

user_preference_test.rb

Clear settings for blocks that are no longer used.

2017-03-15 17:52:41 +00:00

user_test.rb

Adds a User.admin scope (#25416).

2017-04-03 06:49:06 +00:00

version_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

watcher_test.rb

Don't pass conditions to #delete_all.

2016-07-16 10:30:45 +00:00

wiki_content_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

wiki_content_version_test.rb

Adds a test for #23242.

2016-07-09 03:27:51 +00:00

wiki_page_test.rb

Use assert_nil instead of assert_equal.

2016-12-11 15:26:41 +00:00

wiki_redirect_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

wiki_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

workflow_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00

workflow_transition_test.rb

Updates copyright for 2016.

2016-03-13 10:30:10 +00:00