Go to file
Keegan McAllister 7137787984 Escape variables interpolated into <script> within index.html
Django's escapejs prevents breaking out with an embedded </script> tag.

It only works on bare string contents, not JSON-ish lists and such.  So we
generate stream_list and people_list with template loops now.

(imported from commit 07fe4bebaa3fa11bc479b4378b8989560ce77f6f)
2012-10-11 15:01:54 -04:00
api zephyr_mirror: Get new classes to subscribe to from the humbug server. 2012-10-11 14:49:04 -04:00
confirmation Remove expiry; confirmations should never expire. 2012-10-01 10:45:58 -04:00
humbug Add API queries to show public streams and the user's subscriptions. 2012-10-11 14:43:23 -04:00
servers Move our server configuration into puppet. 2012-09-20 17:00:24 -04:00
templates Escape variables interpolated into <script> within index.html 2012-10-11 15:01:54 -04:00
tools Make pressing escape also un-narrow 2012-10-11 14:30:51 -04:00
zephyr Escape variables interpolated into <script> within index.html 2012-10-11 15:01:54 -04:00
.gitignore gitignore: Update for s/zephyrs/messages/ 2012-10-04 15:30:42 -04:00
manage.py Add manage.py (oops). 2012-08-28 12:45:35 -04:00