evazion de289ee5d3 Fix XSS in /artist_versions. ...

1) Put `<script>alert("xss 1")</script>` in the Other Names field in an
   artist entry.
2) Put `<script>alert("xss 2")</script>` in the URLs field.
3) Trick someone into the viewing the history page for that artist.

2014-10-17 15:22:51 -05:00

..

admin

rename references of privileged to gold

2013-04-28 00:04:52 -07:00

moderator

rename references of privileged to gold

2013-04-28 00:04:52 -07:00

advertisements_helper.rb

Kill trailing whitespace in ruby files

2013-03-19 23:10:10 +11:00

application_helper.rb

fixes #2105

2014-03-10 22:34:22 -04:00

artist_versions_helper.rb

Fix XSS in /artist_versions.

2014-10-17 15:22:51 -05:00

artists_helper.rb

fixes #1530

2013-05-04 10:47:07 -04:00

bans_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

bulk_update_requests_helper.rb

Bulk reqs: add line breaks

2014-07-31 21:19:43 -04:00

comment_votes_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

comments_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

delayed_jobs_helper.rb

update iqdb display helper

2014-03-24 15:02:14 -07:00

dmails_helper.rb

fixes #1491

2013-05-07 22:18:11 -04:00

favorites_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

forum_posts_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

forum_topic_visits_helper.rb

fixes #2197

2014-07-17 16:24:03 -07:00

forum_topics_helper.rb

add categories to forum topics

2013-06-06 16:18:04 -07:00

janitor_trials_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

landings_helper.rb

added new landing page

2011-10-28 19:21:44 -04:00

news_updates_helper.rb

added news updates ui

2011-11-01 17:51:15 -04:00

notes_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

pagination_helper.rb

Improve sequential paginator

2013-12-04 14:41:50 -05:00

pool_versions_helper.rb

Clean up pool version diffs

2013-10-26 00:38:45 -04:00

pools_helper.rb

upgraded to jquery 1.5.1, fixed comment voting ajax

2011-03-08 18:23:16 -05:00

post_appeals_helper.rb

rename references of privileged to gold

2013-04-28 00:04:52 -07:00

post_flags_helper.rb

replace old user links with new format

2013-04-04 23:16:28 -04:00

post_versions_helper.rb

fixes #1242

2014-02-28 18:10:36 -08:00

post_votes_helper.rb

fix

2012-01-07 20:14:56 -05:00

posts_helper.rb

fixes #2106

2014-03-14 11:35:26 -04:00

related_tags_helper.rb

work on related tag js

2011-09-30 18:20:29 -04:00

sessions_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

tag_aliases_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

tag_implications_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

tag_subscriptions_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

tags_helper.rb

fixes #2090

2014-01-12 20:03:35 -05:00

unapprovals_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

uploads_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

user_feedback_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

users_helper.rb

stubbed in blank controllers/helpers/functional tests

2010-03-10 18:21:43 -05:00

wiki_page_versions_helper.rb

fixes #2240

2014-08-12 12:41:10 -04:00

wiki_pages_helper.rb

#1961: Restyle other names

2014-06-04 19:15:59 -04:00