evazion de289ee5d3 Fix XSS in /artist_versions. ...

1) Put `<script>alert("xss 1")</script>` in the Other Names field in an
   artist entry.
2) Put `<script>alert("xss 2")</script>` in the URLs field.
3) Trick someone into the viewing the history page for that artist.

2014-10-17 15:22:51 -05:00

..

assets

Update mod queue post previews for consistency with rest of site

2014-10-14 13:14:36 -04:00

controllers

Move normalize_for_artist_finder! into model.

2014-10-05 14:11:32 -05:00

helpers

Fix XSS in /artist_versions.

2014-10-17 15:22:51 -05:00

logical

Show Pool excerpt for ordpool:1234 searches.

2014-10-13 18:15:38 -05:00

mailers

fixes #2191

2014-08-12 17:03:16 -07:00

models

Update mod queue post previews for consistency with rest of site

2014-10-14 13:14:36 -04:00

presenters

#2245 Display more of title

2014-09-20 15:28:03 -04:00

views

Merge pull request #2265 from evazion/misc/disable-submit-buttons

2014-10-16 16:00:26 -07:00