tigefa4u projects Trac

Fix double escaping issue for ticket details in timeline. Should close #2543.

Fix wrong navigation link for ''About'' module.

WebAdmin: updates following [2685].

Document the version in which new classes/functions were introduced.

Follow-up to [2700]: if the `render_unsafe_content` option is set to false, don't allow the direct rendering of any text content. This is to workaround the unfortunate fact that some browsers (IE and Safari) will sniff the actual content of a file to detect whether it contains HTML, and render the text as HTML if it does.

Allow the passing of parameters to the `util.Markup` constructor, which are automatically escaped and interpolated.

Project name and footer may contain markup.

* Don't render HTML/SVG/etc attachments in the browser unless the `render_unsafe_content` option in `[attachment]` is enabled.
* Parse and rewrite the contents of inline HTML (`#!html` blocks), removing anything that could be abused to insert malicious code. Fixes #2473.

Ported [2698] to 0.9-stable.

Fix `Content-Disposition` header for alternative formats in changeset view.