Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Now that posts are individually sanitized, that should be safe.
|
|
|
|
|
|
This should ensure that users can't "break out" from the enclosing
<div>, making it impossible to forge comments (assuming htmlscrubber
is enabled, and so is either htmlbalance or htmltidy).
|
|
|
|
The PageSpec is still called "postcomment" since that's what it means.
|