Commit Graph
3 Commits
Author SHA1 Message Date
Michael Nutt 78c17773db Fix xss due to handlebars variables in javascript (#535)
* fix xss due to handlebars variables in javascript

* fix: update data viewer against XSS

Signed-off-by: Michael Nutt <michael@nuttnet.net>

* fix: remove key_query from all static assets to prevent XSS

Signed-off-by: Michael Nutt <michael@nuttnet.net>

Signed-off-by: Michael Nutt <michael@nuttnet.net>
2023-01-19 00:12:31 -05:00
Michael Nutt a7af45ee3f fix: Ensure font serving does not reflect userdata-derived errors as HTML (#647)
* fix: ensure font serving does not reflect userdata-derived errors as HTML

Signed-off-by: Michael Nutt <michael@nuttnet.net>
2022-11-24 11:07:11 -05:00
Michael Nutt 7cfcc413c4 don't include duplicate attributions (#613) 2022-09-24 16:36:39 -04:00