summaryrefslogtreecommitdiff
path: root/lib/gitlab/sanitizers
Commit message (Collapse)AuthorAgeFilesLines
* Enable Style/MultilineArrayBraceLayoutDouwe Maan2017-02-231-12/+13
|
* Refactored SVG sanitizerGabriel Mazetto2016-06-121-24/+23
|
* Refactor SVG sanitizer and prevent `xlink:href` to refer to external resourcesGabriel Mazetto2016-06-121-5/+15
|
* Fix SVG whitelisting to allow namespaced attributesGabriel Mazetto2016-06-121-5/+18
|
* Fix warning messages with SVG ALLOWED_ELEMENTSStan Hu2016-05-192-89/+89
| | | | Eliminates "warning: already initialized constant Gitlab::Sanitizers::SVG::ALLOWED_ELEMENTS"
* Update SVG sanitizer to conform to SVG 1.1Stan Hu2016-05-062-0/+144
Use a custom Loofah scrubber since sanitize 2.x transformers are inadequate to handle case-sensitive SVG attributes. sanitize parses documents as HTML instead of XML, which causes all SVG attribute names (e.g. viewBox) to be downcased. * SVG element list: https://www.w3.org/TR/SVG/eltindex.html * SVG attribute list: https://www.w3.org/TR/SVG/attindex.html Closes #14555