Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/static/js
History
Brock Whittaker 7f5703a21f Prevent HTML from being pasted into the stream name/description box. 
This prevents users from either dragging formatted markup into content
editable boxes or pasting it in. This uses the “input” event rather
than “paste” because “paste” does not have the end result of the
contents whereas “input” does.

This is not a security vulnerability as it may seem. Processing on the
backend sanitizes input if it contains HTML.
 		2017-02-17 12:01:24 -08:00
..
portico analytics: Move stats.js out of portico/. 2017-02-07 15:35:43 -08:00
src lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
stats stats: Add a fixed display order to summary charts. 2017-02-10 14:41:18 -08:00
.eslintrc.json Change name of eslintrc file to .eslintrc.json 2016-11-29 08:58:39 -08:00
activity.js huddles: Calculate huddle strings more robustly. 2017-02-06 22:38:22 -08:00
admin.js admin: Make restricted to domains checkbox readonly incase of no domains. 2017-02-17 11:55:15 -08:00
alert_words.js refactor: Move is_current_user() to people.js. 2017-01-21 21:45:12 -08:00
alert_words_ui.js alert_words: Trim whitespace around alert words. 2017-02-16 21:06:18 -08:00
attachments_ui.js Add support for managing and deleting attachments. 2017-02-16 23:44:44 -08:00
avatar.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
blueslip.js Add missing exports to js modules 2016-12-29 06:01:33 -08:00
bot_data.js refactor: Move is_current_user() to people.js. 2017-01-21 21:45:12 -08:00
channel.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00
click_handlers.js Prevent HTML from being pasted into the stream name/description box. 2017-02-17 12:01:24 -08:00
colorspace.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00
common.js auth: Make min password length and strength configurable. 2017-01-10 04:55:41 -08:00
components.js Fix tab click unresponsiveness. 2017-02-14 23:20:38 -08:00
compose.js compose: Trim trailing whitespace in messages. 2017-02-11 23:01:22 -08:00
compose_fade.js refactor: Move is_current_user() to people.js. 2017-01-21 21:45:12 -08:00
composebox_typeahead.js refactor: Use user_id as key for pm_recipient_count. 2017-02-06 22:38:22 -08:00
condense.js perf: Use offsetHeight rather than getBoundingClientRect() in condenser. 2017-01-04 12:42:16 -08:00
copy_and_paste.js lint: Fix many no-unused-vars eslint rule violations. 2016-12-14 21:34:51 -08:00
custom_markdown.js refactor: Use people.my_current_email() in custom_markdown.js. 2017-01-21 21:45:12 -08:00
debug.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
dict.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
echo.js bug fix: Fix recent regression with at-mentioning. 2017-01-23 16:42:43 -08:00
emoji.js build_emoji: Generate emoji names and codepoints from emoji_map. 2017-01-28 17:05:32 -08:00
favicon.js Switch from deprecated $.browser to userAgent test. 2016-08-25 14:12:58 -07:00
feature_flags.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00
fenced_code.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
filter.js Create filter.update_email(). 2017-02-14 23:25:22 -08:00
floating_recipient_bar.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00
gear_menu.js redesign: Change /#settings and /#administration to an overlay. 2017-02-09 23:35:10 -08:00
hashchange.js redesign: Change /#settings and /#administration to an overlay. 2017-02-09 23:35:10 -08:00
hotkey.js hotkey: Fix incorrect test for open subscriptions overlay. 2017-02-12 13:29:12 -08:00
invite.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
loading.js Remove the old spinner, replace with new one. 2017-01-06 10:37:54 -08:00
localstorage.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00
message_edit.js Added keyboard shortcut to edit the last message. 2017-02-12 00:29:28 -08:00
message_flags.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
message_list.js Added keyboard shortcut to edit the last message. 2017-02-12 00:29:28 -08:00
message_list_view.js Add styling to distinguish bots from human users in message view. 2017-02-16 17:00:21 -08:00
message_live_update.js Remove avatar timestamp logic in the client. 2017-02-17 10:19:56 -08:00
message_store.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
muting.js muting: Refactor to move side effects into UI layer. 2017-02-11 08:36:39 -08:00
muting_ui.js Add UI for seeing all muted topics in settings page. 2017-02-17 00:10:18 -08:00
narrow.js Create narrow.update_email(). 2017-02-14 23:25:22 -08:00
navigate.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
notifications.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
people.js Remove avatar timestamp logic in the client. 2017-02-17 10:19:56 -08:00
pm_list.js bug fix: Clean up blue highlighting in the left corner. 2017-02-06 16:10:24 -08:00
pointer.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
popovers.js Add UI for seeing all muted topics in settings page. 2017-02-17 00:10:18 -08:00
reactions.js reactions: Fix exceptions reacting to locally echoed messages. 2017-02-07 14:13:29 -08:00
referral.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
reload.js reload: Catch exceptions aborting pending AJAX requests. 2017-01-22 20:23:37 -08:00
resize.js Make more streams visible when window is narrow. 2017-01-12 16:53:45 -08:00
rows.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
scroll_bar.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
search.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
search_suggestion.js search_suggestion: Suggest multiple people in `pm-with` searches. 2017-02-07 14:13:29 -08:00
server_events.js Use user_id in admin_user_list.handlebars. 2017-02-14 23:07:44 -08:00
settings.js Remove avatar timestamp logic in the client. 2017-02-17 10:19:56 -08:00
setup.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
socket.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
stream_color.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
stream_data.js Fix flaw when subscribing using "Add" button. 2017-01-21 21:45:12 -08:00
stream_list.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
subs.js Make subscriptions page responsive. 2017-02-09 14:01:00 -08:00
tab_bar.js lint: Fix many no-unused-vars eslint rule violations. 2016-12-14 21:34:51 -08:00
templates.js eslint: change no-plusplus from warning to 2 and fix violations. 2016-12-01 14:27:17 -08:00
timerender.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00
topic_list.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
tutorial.js Direct new users to the "new members" stream. 2017-01-19 14:58:31 -08:00
typeahead_helper.js compose: Show description in autocomplete. 2017-01-04 22:48:34 -08:00
ui.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
unread.js Update PM unread counts more dynamically in the client. 2017-02-14 23:25:22 -08:00
unread_ui.js unread: Refactor to move DOM element updates into UI layer. 2017-02-11 08:36:39 -08:00
user_events.js Remove avatar timestamp logic in the client. 2017-02-17 10:19:56 -08:00
util.js compose: Trim trailing whitespace in messages. 2017-02-11 23:01:22 -08:00
viewport.js lint: Add dangling commas in JavaScript objects. 2017-01-11 15:23:42 -08:00
zulip.js Migrate JS modules to CommonJS style. 2016-12-07 16:11:52 -08:00