mirror of https://github.com/zulip/zulip.git
7137787984
Django's escapejs prevents breaking out with an embedded </script> tag. It only works on bare string contents, not JSON-ish lists and such. So we generate stream_list and people_list with template loops now. (imported from commit 07fe4bebaa3fa11bc479b4378b8989560ce77f6f) |
||
---|---|---|
api | ||
confirmation | ||
humbug | ||
servers | ||
templates | ||
tools | ||
zephyr | ||
.gitignore | ||
manage.py |