mirror of
https://github.com/ankitects/anki.git
synced 2025-09-18 22:12:21 -04:00
ddb8573e8d
* Revert "Sanitize field content in editor"
This reverts commit 1c156905f8.
* Use CSP to block inline JS content in editor
This blocks inline scripts, scripts in the media folder, and
handlers like onclick in the editor. This is nicer than the previous
solution - it doesn't make any permanent changes, and leaves other
content like SVGs alone. Thanks to Nil Admirari for the suggestion.
8 lines
283 B
TypeScript
8 lines
283 B
TypeScript
// Copyright: Ankitects Pty Ltd and contributors
|
|
// License: GNU AGPL, version 3 or later; http://www.gnu.org/licenses/agpl.html
|
|
|
|
export * from "./content-editable";
|
|
export * from "./location";
|
|
export * from "./move-nodes";
|
|
export * from "./place-caret";
|
|
export * from "./surround";
|