| Age | Commit message (Collapse) | Author |
|
SafeString::purify().
Removing any p::clean() calls for arguments to t() and t2() since their args are wrapped in a SafeString anyway.
|
|
item::description. In addition add p::clean or p::purify to places that
xss cleaning had missed (i.e. rss feeds)
|
|
approach using html::specialchars and purify uses HTMLPurifier to intelligently
cleanse the output fields. Use purifier for text and title fields where it is
likely that a user would enter html to format their data.
|
|
Created a new view "movieplayer.html.php", which is rendered by
Item_Model::movie_img(). Changed movie.html.php to use movie_img to render
the movie player link.
|
|
|
|
ADD_A_COMMENT otherwise ui.init.js bombs.
|
|
|
|
longer than it has to. This resolves ticket #199.
|
|
them using the h264streaming plugin. Everything else is a fairly
minor change.
|
|
extract a thumbnail out of it and if you click through we show it
using flowplayer.
|