mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 04:02:30 +08:00
3298a9df91## Summary Correctly sanitize calendar event tooltip content through the Discourse standard sanitizer immediately before the trustHTML sink, removing unsafe attributes like `id` and `style` while preserving safe formatting such as links, emoji, bold labels, and line breaks. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1578 Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| composer | ||
| page_objects/discourse_calendar | ||
| anonymous_user_rsvp_event_spec.rb | ||
| calendar_first_day_of_week_spec.rb | ||
| category_calendar_spec.rb | ||
| category_event_sorting_settings_spec.rb | ||
| core_features_spec.rb | ||
| desktop_topic_livestream_authenticated_spec.rb | ||
| disable_sort_spec.rb | ||
| event_card_spec.rb | ||
| events_category_type_setup_spec.rb | ||
| group_timezones_spec.rb | ||
| livestream_calendar_event_spec.rb | ||
| livestream_zoom_webinar_spec.rb | ||
| mobile_topic_livestream_authenticated_spec.rb | ||
| post_calendar_spec.rb | ||
| post_event_spec.rb | ||
| upcoming_events_spec.rb | ||
