isso/isso
Martin Zimmermann 48e7ddb7f5 proper use of Misaka's HTML render flags (fix malicious HTML injection)
This commit now sanitizes *all* HTML tags written by the user (also
prevents auto-link to "unsafe" web protocols and images) as intended.

Fortunately because of Sundown's typography support, it did not affect
JS injection, but custom style tags and iframes.

PS: thanks to the anonymous submitter of a comment including a style tag
for 24pt, red font ;-)
2014-01-12 14:47:48 +01:00
..
css reduce heading size in comments, fix #26 2013-12-12 12:10:50 +01:00
db remove unnecessary imports 2013-11-17 15:49:25 +01:00
ext add Date header, close #42 2013-12-07 13:17:56 +01:00
js italian translation by alzeco 2013-12-12 17:30:40 +01:00
utils proper use of Misaka's HTML render flags (fix malicious HTML injection) 2014-01-12 14:47:48 +01:00
views Merge branch 'feature/27', override thread id 2013-12-12 13:07:57 +01:00
__init__.py move application export to isso.run 2013-12-08 19:15:08 +01:00
compat.py improve doctests and refactor title extraction 2013-10-29 12:01:45 +01:00
core.py isso.dispatch now dispatches multiple sites based on relative URLs 2013-12-08 19:09:56 +01:00
dispatch.py isso.dispatch now dispatches multiple sites based on relative URLs 2013-12-08 19:09:56 +01:00
migrate.py use <link> tag to extract the relative post url, fixes #37 2013-11-16 20:30:48 +01:00
run.py move application export to isso.run 2013-12-08 19:15:08 +01:00
wsgi.py isso.dispatch now dispatches multiple sites based on relative URLs 2013-12-08 19:09:56 +01:00