zulip/static/templates
Anders Kaseorg 3eb2791c3e CVE-2021-3853: Fix HTML escaping in recipient_row.
Commit 44f935695d (#20462) incorrectly
added these extra braces while intending to add whitespace control.
This triple-brace syntax was asking Handlebars to skip escaping the
string.

Signed-off-by: Anders Kaseorg <anders@zulip.com>
2022-01-18 21:28:21 -08:00
..
confirm_dialog settings: Rephrase text in user deactivation modal. 2022-01-04 14:42:19 -08:00
navbar_alerts navbar_alerts: Add alerts for demo org deadlines. 2021-09-10 16:31:54 -07:00
settings org edit_bot_modal: Fix styling issues. 2022-01-11 09:15:06 -08:00
stream_settings stream edit: Tighten up selectors for handlers. 2021-12-30 11:36:52 -08:00
widgets todo_widget: Tag "Task list" heading for translation. 2022-01-18 14:15:34 -08:00
about_zulip.hbs about_zulip: Mark strings for translation. 2021-06-18 18:13:00 -07:00
actions_popover_content.hbs copy_link: Add onSuccess listener to copy clipboard. 2021-07-02 11:33:37 -07:00
all_messages_sidebar_actions.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
announce_stream_docs.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
blueslip_stacktrace.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
bookend.hbs message_list: Convert bookend_content messages to FormatJS. 2021-04-13 17:41:10 -07:00
buddy_list_tooltip_content.hbs templates: Mark all void tags as self-closing. 2021-04-21 09:49:34 -07:00
compose.hbs compose: Fix Enter to send switch internationalization. 2022-01-07 14:38:10 -08:00
compose_all_everyone.hbs templates: Fix <br> → <br /> to be parseable by FormatJS. 2021-04-20 14:39:53 -07:00
compose_announce.hbs templates: Fix <br> → <br /> to be parseable by FormatJS. 2021-04-20 14:39:53 -07:00
compose_control_buttons.hbs compose: Move emoji button outside of popover. 2022-01-05 16:03:53 -08:00
compose_control_buttons_in_popover.hbs compose: Move emoji button outside of popover. 2022-01-05 16:03:53 -08:00
compose_control_buttons_popover.hbs compose: Move overflowing buttons to a popover. 2021-12-02 15:11:15 -08:00
compose_invite_users.hbs compose: Clarify subscribe-other-user button label. 2021-09-16 11:09:53 -07:00
compose_not_subscribed.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
compose_notification.hbs notification: Fix "narrow to..." link present above composebox. 2021-08-07 09:51:04 -07:00
compose_private_stream_alert.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
compose_select_enter_behaviour_popover.hbs compose: Fix Enter to send switch internationalization. 2022-01-07 14:38:10 -08:00
copy_code_button.hbs copy_code_button: Attach tooltip to body to avoid overlap with parent. 2021-10-01 10:04:17 -07:00
copy_invite_link.hbs lint: Fix badly quoted strings tagged for translation. 2021-05-09 20:16:28 -07:00
copy_message_button.hbs lint: Fix badly quoted strings tagged for translation. 2021-05-09 20:16:28 -07:00
copy_to_clipboard_svg.hbs templates: Extract and tweak copy_to_clipboard_svg from both buttons. 2020-10-08 17:13:50 -07:00
default_language_modal.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
dialog_change_password.hbs change_password: Migrate modal to dialog_widget. 2021-11-23 15:41:54 -08:00
dialog_widget.hbs dialog_widget: Use simplebar for the modals using dialog_widget. 2021-12-01 12:13:06 -08:00
draft.hbs drafts: Add hotkey hint to restore draft. 2021-11-10 12:54:53 -08:00
draft_table_body.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
drafts_sidebar_action.hbs popovers: Add sidebar menu to delete all drafts. 2021-11-22 17:01:47 -08:00
edit_content_button.hbs tooltips: Use TippyJS for all message_control_button tooltips. 2021-05-13 12:56:38 -07:00
edited_notice.hbs message list: Display MOVED for messages with only topic edits. 2021-12-09 10:50:01 -08:00
embedded_bot_config_item.hbs
emoji_popover.hbs
emoji_popover_content.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
emoji_popover_emoji.hbs emoji_picker: Update architecture to support status emoji. 2021-07-23 13:03:13 -07:00
emoji_popover_search_results.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
emoji_showcase.hbs
empty_feed_notice.hbs narrow_banner: Move empty narrow messages to handlebar templates. 2021-12-07 13:38:48 -08:00
favicon.svg.hbs dependencies: Upgrade Source Sans Pro font to Source Sans 3. 2021-02-23 14:55:33 -08:00
feedback_container.hbs
filter_topics.hbs left-sidebar: Add topic filter input in zoomed topic view. 2021-06-08 15:09:26 -07:00
gear_menu.hbs popovers: Hide most irrelevant options for spectators. 2021-09-21 10:10:54 -07:00
giphy_picker.hbs templates: Mark all void tags as self-closing. 2021-04-21 09:49:34 -07:00
giphy_picker_mobile.hbs giphy: Use GIPHY web SDK to allow inserting GIFs in compose box. 2021-04-05 15:04:49 -07:00
help_link_widget.hbs
hotspot_icon.hbs hotspots: Generate properly escaped HTML. 2021-02-05 09:26:47 -08:00
hotspot_overlay.hbs hotspots: Remove useless and malformed alt text. 2021-04-27 11:12:24 -07:00
input_pill.hbs input_pill: Customize pills for deactivated users. 2021-06-25 18:06:42 -07:00
invitation_failed_error.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
invite_subscription.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
invite_user.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
keyboard_shortcuts.hbs user_settings: Add option to disable escape key navigation to default view. 2021-10-29 18:15:30 -07:00
left_sidebar.hbs left sidebar: Add titles for remaining global filters. 2021-12-01 17:07:55 -08:00
left_sidebar_stream_setting_popover.hbs left_sidebar: Replace cog icon with plus icon. 2021-06-08 14:55:48 -07:00
lightbox_overlay.hbs lightbox_overlay: “Pan and Zoom” → “Pan & zoom”. 2021-06-21 16:38:11 -07:00
loader.hbs
login_to_access.hbs login_to_access_modal: Migrate modal to Micromodal. 2021-11-30 14:39:46 -08:00
markdown_help.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
markdown_time_tooltip.hbs markdown: Change timezone to time zone in <time> tooltip. 2021-07-08 10:10:11 -04:00
markdown_timestamp.hbs markdown: Add fa-clock icon before markdown timestamps. 2021-03-14 22:57:01 -07:00
me_message.hbs zulip-icon: Add `zulip-icon` as classPrefix for icon. 2021-04-29 09:02:25 -07:00
message_avatar.hbs message_body: Fix -3px alignment kludge using whitespace control. 2021-06-23 09:10:50 -07:00
message_body.hbs linters: Rewrite check-templates. 2021-11-23 15:55:54 -08:00
message_controls.hbs message view: Show failed message icon tooltips similar to other icons. 2021-07-18 11:33:32 -07:00
message_edit_form.hbs linters: Rewrite check-templates. 2021-11-23 15:55:54 -08:00
message_edit_history.hbs templates: Mark all void tags as self-closing. 2021-04-21 09:49:34 -07:00
message_group.hbs
message_hidden_dialog.hbs message view: Allow revealing hidden message from muted sender. 2021-05-05 09:15:45 -07:00
message_history_modal.hbs message_edit_history: Migrate modal to dialog_widget. 2021-11-08 17:24:31 -08:00
message_reaction.hbs
message_reactions.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
message_view_header.hbs message_view_header: Hide subscriber count for spectators. 2021-11-03 16:02:53 -07:00
mobile_message_buttons_popover_content.hbs
more_topics.hbs topic_list_item: Use `unread_counts` class for showing unread count. 2021-04-14 10:57:16 -07:00
more_topics_spinner.hbs
move_topic_to_stream.hbs move_topic_modal: Use `dialog_error` to display error. 2021-12-02 14:02:27 -08:00
muted_topic_ui_row.hbs
muted_user_ui_row.hbs settings: Add UI page for managing muted users. 2021-04-21 10:17:44 -07:00
navbar.hbs linters: Rewrite check-templates. 2021-11-23 15:55:54 -08:00
navbar_icon_and_title.hbs
new_stream_user.hbs streams: Hide fake emails in stream creation form. 2021-11-18 12:49:10 -08:00
new_stream_users.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
no_arrow_popover.hbs
non_editable_user_group.hbs
playground_links_popover_content.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
pm_list_item.hbs left_sidebar: Replace user_circle_class with fa fa-group icon. 2021-04-30 16:02:29 -07:00
recent_topic_row.hbs tippy: Set default placement of tooltips to top. 2021-07-07 10:23:31 -07:00
recent_topics_filters.hbs recent_topic: Add role and area properties according to MDN docs. 2021-03-16 14:54:22 -07:00
recent_topics_table.hbs templates: Mark all void tags as self-closing. 2021-04-21 09:49:34 -07:00
recipient_row.hbs CVE-2021-3853: Fix HTML escaping in recipient_row. 2022-01-18 21:28:21 -08:00
remind_me_popover_content.hbs
right_sidebar.hbs templates: Prevent dangling end tags. 2021-11-23 15:55:54 -08:00
search_operators.hbs search_operators: Add info about `is:resolved` keyword. 2021-07-13 23:48:45 -07:00
set_status_overlay.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
settings_overlay.hbs edit_bot: Migrate modal to dialog_widget. 2021-11-08 17:34:42 -08:00
settings_tab.hbs settings: Create user_notification_settings.hbs template. 2021-08-20 07:50:51 -07:00
single_message.hbs
starred_messages_sidebar_actions.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
status_emoji_selector.hbs user_status: Add UI changes for status emoji feature. 2021-07-28 10:02:50 -07:00
stream_privacy.hbs
stream_sidebar_actions.hbs popovers: Hide most irrelevant options for spectators. 2021-09-21 10:10:54 -07:00
stream_sidebar_row.hbs left_sidebar: Hide vdots for All messages and stream buttons. 2021-11-02 11:26:19 -07:00
stream_topic_widget.hbs templates: Escape some unescaped > and & characters. 2021-05-20 12:09:47 -07:00
topic_edit_form.hbs topic_edit_form: Restyle topic edit save button with logo colours. 2021-07-08 17:45:42 -07:00
topic_list_item.hbs left-sidebar: Add support for showing resolve-topic-prefix. 2021-07-05 18:02:40 -07:00
topic_muted.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
topic_sidebar_actions.hbs popovers: Hide most irrelevant options for spectators. 2021-09-21 10:10:54 -07:00
typeahead_list_item.hbs linters: Rewrite check-templates. 2021-11-23 15:55:54 -08:00
typing_notification.hbs templates: Remove context argument from {{#tr}} block helper. 2021-04-13 18:59:46 -07:00
typing_notifications.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
user_group_info_popover.hbs
user_group_info_popover_content.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
user_group_list_item.hbs popovers: Add tabs for profile, groups and streams in user_info modal. 2021-06-11 07:56:32 -07:00
user_info_popover_content.hbs popovers: Add "Manage this user" option to user info popover. 2021-12-01 12:13:06 -08:00
user_info_popover_title.hbs
user_presence_row.hbs buddy_list: Show still image for animated emojis. 2021-09-12 16:24:29 -07:00
user_presence_rows.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
user_profile_modal.hbs templates: Always indent "each" blocks. 2021-12-06 14:58:29 -08:00
user_stream_list_item.hbs profile: Add tooltip to hint unsubscription flow for private stream. 2021-06-30 15:17:27 -07:00
view_code_in_playground.hbs view_code_in_playground: Use tippy for tooltip. 2021-04-07 17:38:40 -07:00