grecia

Files

Javi Martín 8b73cfc019 Sanitize annotation context before displaying it

There's a case where we would face a Cross-Site Scripting attack. An
attacker could use the browser's developer tools to add (on their
browser) a `<code>` tag with a `<script>` tag inside in the text of the
draft version. After doing so, commenting on that text would result in
the attacker's JavaScript being executed.

2019-10-08 18:46:20 +02:00

_annotation_link.html.erb

Apply rule to end files with a newline character

2019-09-10 20:02:15 +02:00

_comment_header.html.erb

Apply rule to end files with a newline character

2019-09-10 20:02:15 +02:00

_comments_box_form.js.erb

Use double quotes in app/views/legislation

2019-03-19 12:16:50 +01:00

_comments_box.html.erb

Generate labels for attribute automatically