0e707d641e
This escapes all strings provided by add-ons server data to guarantee they can't be used to get extraneous and potentially harmful HTML into the generated web index. However, and because I don't have time to look into the dense regex contained in the relevant code right now, it also removes the hidden feature of linkifying any URLs found in add-on descriptions. It's a small price to pay for our safety, really. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| asc.gif | ||
| bg.gif | ||
| COPYING.txt | ||
| desc.gif | ||
| html.py | ||
| jquery.js | ||
| style.css | ||
| tablesorter.js | ||
