This repository has been archived on 2024-01-04. You can view files and clone it, but cannot push or open issues or pull requests.
forgejo/routers/web
Lunny Xiao b01dce2a6e
Allow render HTML with css/js external links (#19017)
* Allow render HTML with css/js external links

* Fix bug because of filename escape chars

* Fix lint

* Update docs about new configuration item

* Fix bug of render HTML in sub directory

* Add CSP head for displaying iframe in rendering file

* Fix test

* Apply suggestions from code review

Co-authored-by: delvh <dev.lh@web.de>

* Some improvements

* some improvement

* revert change in SanitizerDisabled of external renderer

* Add sandbox for iframe and support allow-scripts and allow-same-origin

* refactor

* fix

* fix lint

* fine tune

* use single option RENDER_CONTENT_MODE, use sandbox=allow-scripts

* fine tune CSP

* Apply suggestions from code review

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>

Co-authored-by: delvh <dev.lh@web.de>
Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2022-06-16 11:33:23 +08:00
..
admin Refactor git module, make Gitea use internal git config (#19732) 2022-06-10 09:57:49 +08:00
auth Adding button to link accounts from user settings (#19792) 2022-05-29 02:03:17 +02:00
dev
events
explore In code search, get code unit accessible repos in one (main) query (#19764) 2022-06-16 02:24:10 +03:00
feed
healthcheck
misc
org Move issues related files into models/issues (#19931) 2022-06-13 17:37:59 +08:00
repo Allow render HTML with css/js external links (#19017) 2022-06-16 11:33:23 +08:00
user Remove tab/TabName usage where it's not needed (#19973) 2022-06-15 23:05:32 +08:00
auth.go
auth_windows.go
base.go Update base.go (#19739) 2022-05-19 11:20:34 -04:00
goget.go
home.go
metrics.go
nodeinfo.go
swagger_json.go
web.go Allow render HTML with css/js external links (#19017) 2022-06-16 11:33:23 +08:00
webfinger.go Move almost all functions' parameter db.Engine to context.Context (#19748) 2022-05-20 22:08:52 +08:00