mirror of https://github.com/zulip/zulip.git
7f5703a21f
This prevents users from either dragging formatted markup into content editable boxes or pasting it in. This uses the “input” event rather than “paste” because “paste” does not have the end result of the contents whereas “input” does. This is not a security vulnerability as it may seem. Processing on the backend sanitizes input if it contains HTML. |
||
|---|---|---|
| .. | ||
| assets | ||
| audio | ||
| generated | ||
| html | ||
| images | ||
| js | ||
| locale | ||
| styles | ||
| templates | ||
| third | ||
| .gitignore | ||
| favicon.ico | ||
| node_modules | ||
| robots.txt | ||