Richard van der Hoff 669400e22f Enable auto-escaping for the consent templates ...

... to reduce the risk of somebody introducing an html injection attack...

2018-05-22 14:58:34 +01:00

..

api

Reject attempts to send event before privacy consent is given

2018-05-22 12:00:47 +01:00

app

Merge pull request #3163 from matrix-org/cohort_analytics

2018-05-16 10:09:24 +00:00

appservice

Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background

2018-04-27 14:31:23 +01:00

config

Reject attempts to send event before privacy consent is given

2018-05-22 12:00:47 +01:00

crypto

Fixes #3135 - Replace _OpenSSLECCurve with crypto.get_elliptic_curve (#3157)

2018-04-30 16:21:11 +01:00

events

add comment explaining attributeerror

2018-04-30 09:49:10 +02:00

federation

Merge pull request #3209 from damir-manapov/master

2018-05-11 00:35:13 +01:00

groups

Merge remote-tracking branch 'origin/develop' into rav/use_run_in_background

2018-04-27 14:31:23 +01:00

handlers

Reject attempts to send event before privacy consent is given

2018-05-22 12:00:47 +01:00

http

Don't store context

2018-05-22 09:34:26 +01:00

metrics

Note that label values can be anything

2018-05-03 16:25:05 +01:00

module_api

Delete devices in various logout situations

2017-11-29 16:44:35 +00:00

push

Merge pull request #3152 from NotAFile/py3-local-imports

2018-04-30 01:28:13 +01:00

replication

Send users a server notice about consent

2018-05-22 11:54:51 +01:00

rest

Enable auto-escaping for the consent templates

2018-05-22 14:58:34 +01:00

server_notices

Stub out ServerNoticesSender on the workers

2018-05-22 11:54:51 +01:00

static/client

Updates to fallback CAS login to do new token login

2015-11-06 09:57:17 +00:00

storage

Send users a server notice about consent

2018-05-22 11:54:51 +01:00

streams

replace 'except:' with 'except Exception:'

2017-10-23 15:52:32 +01:00

util

Comment

2018-05-22 11:39:43 +01:00

__init__.py

bump version, change log

2018-05-17 21:35:07 +01:00

event_auth.py

Fix templating error with unban permission message

2018-01-07 19:52:58 -07:00

notifier.py

Merge remote-tracking branch 'origin/develop' into rav/deferred_timeout

2018-04-27 14:18:00 +01:00

python_dependencies.py

Miscellaneous fixes to python_dependencies

2018-05-01 18:13:54 +01:00

server.py

Stub out ServerNoticesSender on the workers

2018-05-22 11:54:51 +01:00

server.pyi

Send users a server notice about consent

2018-05-22 11:54:51 +01:00

state.py

Measure time it takes to calculate state group ID

2018-03-28 11:03:52 +01:00

types.py

In DomainSpecificString, override __repr__ in addition to __str__

2018-04-10 11:35:29 +02:00

visibility.py

Remove preserve_context_over_{fn, deferred}

2017-11-14 11:22:42 +00:00