Форк Rambox

facebook-workplaceoutlookemailmicrosoft-teamsdiscordmessengercustom-servicesmacoslinuxwindowsinboxwhatsappicloudtweetdeckhipchattelegramhangoutsslackgmailskype

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tree: 63ef9554dd

0.5.10

0.5.11

0.5.12

0.5.13

0.5.14

0.5.15

0.5.16

0.5.17

0.5.9

0.7.4

delete-partition-folder

gh-pages

master

pr/1759

revert-2138-fix-electron-webview-event-not-propaggaded

v0.5.8

0.1.0

0.2.0

0.2.1

0.2.2

0.2.3

0.2.4

0.3.0

0.4.0

0.4.1

0.4.2

0.4.4

0.4.5

0.5.10

0.5.12

0.5.13

0.5.14

0.5.15

0.5.16

0.5.17

0.5.2

0.5.3

0.5.9

0.6.0

0.6.1

0.6.2

0.6.3

0.6.4

0.6.5

0.6.6

0.6.7

0.6.8

0.6.9

0.7.0

0.7.1

0.7.2

0.7.3

0.7.4

0.7.5

0.7.6

0.7.7

0.7.8

0.7.9

0.8.0

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '63ef9554dd'

${ noResults }

Rambox-CE/app/view/preferences

History

TheGoddessInari 63ef9554dd Escape title user inputs. Fix our version of CVE-2019-17625. ... We take the simple/cheap way out and use ExtJS htmlEncode on all entry points for this. This is still mostly limited to 'doing it to yourself'. The main fix is in app/view/main/Main.js where the title is rendered out, and will apparently execute arbitrary javascript within a title tag(!). This is an ExtJS thing, apparently, so we make it unconditionally encode it to render on the bar. Apparently this isn't the only place arbitrary execution can occur, so just be safe(r).		5 years ago
..
Preferences.js	Escape title user inputs. Fix our version of CVE-2019-17625.	5 years ago
PreferencesController.js	Rename baseline from Rambox-OS to Hamsket.	6 years ago
PreferencesModel.js	Rename baseline from Rambox-OS to Hamsket.	6 years ago