1
1
mirror of https://github.com/go-gitea/gitea.git synced 2026-03-25 12:41:54 +01:00
gitea/web_src/js/markup
Lunny Xiao 315b947740
Harden render iframe open-link handling (#36811)
This PR hardens the handling of the “open-link” action in render iframes
(external rendering iframes). It prevents iframes from triggering unsafe
or unintended redirects or opening new windows via postMessage.

Additionally, it improves iframe height reporting to reduce scrollbar
and height mismatch issues, and adds unit test coverage.

---------

Co-authored-by: wxiaoguang <wxiaoguang@gmail.com>
2026-03-03 23:15:33 -08:00
..
anchors.ts Add documentation for markdown anchor post-processing (#36443) 2026-01-24 05:31:57 +01:00
asciicast.ts Remove and forbid @ts-expect-error (#36513) 2026-02-02 01:00:34 +08:00
codecopy.ts Fix markup code block layout (#36578) 2026-02-11 03:22:33 +00:00
common.ts Fix a number of typescript issues (#32459) 2024-11-11 11:13:57 +00:00
content.ts Fix "ref-issue" handling in markup (#35739) 2025-10-27 22:45:07 +08:00
html2markdown.test.ts Support quote selected comments to reply (#32431) 2024-11-07 03:57:07 +00:00
html2markdown.ts Update eslint to v9 (#35485) 2025-09-14 19:15:06 +03:00
math.ts Fix markdown render behaviors (#34122) 2025-04-05 11:56:48 +08:00
mermaid.test.ts Fix various mermaid bugs (#36547) 2026-02-08 12:21:11 +08:00
mermaid.ts Fix markup code block layout (#36578) 2026-02-11 03:22:33 +00:00
refissue.ts Lazy-load some Vue components, fix heatmap chunk loading on every page (#36719) 2026-02-27 05:06:15 +00:00
render-iframe.test.ts Harden render iframe open-link handling (#36811) 2026-03-03 23:15:33 -08:00
render-iframe.ts Harden render iframe open-link handling (#36811) 2026-03-03 23:15:33 -08:00
tasklist.ts Enable TypeScript strictNullChecks (#35843) 2025-12-03 02:13:16 +00:00