5 Commits

Author	SHA1	Message	Date
Laurent Cozic	810018b41f	Desktop: Security: Fixes #6004: Prevent XSS in Goto Anything	2022-01-15 16:53:24 +00:00
Laurent Cozic	4deeed0d5c	Desktop, Mobile: Fixes #5687: Fixed issue with parts of HTML notes not being displayed in some cases	2021-11-09 18:33:28 +00:00
Laurent Cozic	feaecf7653	Desktop, Mobile: Filter out form elements from note body to prevent potential XSS (thanks to Dmytro Vdovychinskiy for the PoC)	2021-06-11 20:17:45 +02:00
Laurent Cozic	9c20d5947d	All: Security: Filter out NOSCRIPT tags that could be used to cause an XSS (thanks to Jubair Rehman for the PoC)	2021-05-10 11:22:12 +02:00
Laurent Cozic	d953f6bcab	Desktop, Mobile: Fixes #4119: Fixed links imported from ENEX as HTML	2020-11-20 16:04:47 +00:00