Age | Commit message (Collapse) | Author | |
---|---|---|---|
2023-03-03 | Add support for incoming rich text (#23913) | Claire | |
2023-01-11 | Fix sanitizer parsing link text as HTML when stripping unsupported links ↵ | Claire | |
(#22558) | |||
2021-03-19 | Prepare Mastodon for zeitwerk autoloader (#15917) | Claire | |
* Prepare Mastodon for zeitwerk autoloader (Rails 6) Add inflections and rename/move a few classes. In particular, app/lib/exceptions.rb and app/lib/sanitize_config.rb were manually loaded while still in autoload paths. * Add inflection for Url → URL | |||
2020-02-08 | Fix rendering `<a>` without `href` when scheme unsupported (#13040) | Eugen Rochko | |
- Disallow links with relative paths - Disallow iframes with non-http protocols and relative paths Close #13037 | |||
2019-10-24 | Add noopener and/or noreferrer (#12202) | BSKY | |
2019-07-19 | Fix sanitizing lists contents (#11354) | ThibG | |
* Add test * Fix code for sanitizing nested lists stripping all tags | |||
2019-06-16 | Fix sanitizer making block level elements unreadable (#10836) | Eugen Rochko | |
Fix #10834 |