Damien Elmes ddb8573e8d Use CSP to block inline JS content in editor (#3939) ... * Revert "Sanitize field content in editor" This reverts commit 1c156905f8. * Use CSP to block inline JS content in editor This blocks inline scripts, scripts in the media folder, and handlers like onclick in the editor. This is nicer than the previous solution - it doesn't make any permanent changes, and leaves other content like SVGs alone. Thanks to Nil Admirari for the suggestion.		2025-04-23 16:21:48 +10:00
..
components	Center align rows in FSRS simulator (#3882)	2025-03-26 17:21:21 +10:00
domlib	Use CSP to block inline JS content in editor (#3939)	2025-04-23 16:21:48 +10:00
generated	alertOnError should default to true	2024-04-17 20:13:37 +10:00
sass	Update dprint (#3376)	2024-08-22 18:24:56 +07:00
sveltelib	Fix editor width changing as tag completions shown (#3574)	2024-11-18 01:11:21 +10:00
tag-editor	add cut handler in TagInput (#3791)	2025-02-06 14:26:44 +07:00
tslib	Improve natural unit conversion for a time b/w 360 to 365 days (#3901)	2025-04-13 14:26:34 +10:00