zulip

Commit Graph

Author	SHA1	Message	Date
Tim Abbott	a2767e8c50	CVE-2020-14194: Use noopener/noreferrer for external links. We fixed the main issue of this form in CVE-2020-9444, but the audit done at that time only included links found in rendered_markdown; this change completes our audit for links with target=_blank anywhere in the codebase.	2020-06-16 23:35:39 -07:00
Pragati Agrawal	12504075ee	org settings: Rename plan_includes_wide_organization_logo to more generic. It's a preliminary step to enable message_retention_setting in org settings UI, which is a non-limited plan only feature. So we require a page_param property that tells us the limited-plan state of the Zulip realm.	2020-05-08 14:04:21 -07:00
Pragati Agrawal	b0466cfd67	org settings: Extract upgrade zulip plan tip widget. We can use this tip at multiple places so it's a better idea to extract this widget/tip in its own template.	2020-05-08 14:04:21 -07:00

Author

SHA1

Message

Date

Tim Abbott

a2767e8c50

CVE-2020-14194: Use noopener/noreferrer for external links.

We fixed the main issue of this form in CVE-2020-9444, but the audit
done at that time only included links found in rendered_markdown; this
change completes our audit for links with target=_blank anywhere in
the codebase.

2020-06-16 23:35:39 -07:00

Pragati Agrawal

12504075ee

org settings: Rename plan_includes_wide_organization_logo to more generic.

It's a preliminary step to enable message_retention_setting in org settings
UI, which is a non-limited plan only feature. So we require a page_param
property that tells us the limited-plan state of the Zulip realm.

2020-05-08 14:04:21 -07:00

Pragati Agrawal

b0466cfd67

org settings: Extract upgrade zulip plan tip widget.

We can use this tip at multiple places so it's a better idea to extract
this widget/tip in its own template.

2020-05-08 14:04:21 -07:00

3 Commits