Frédéric Guillot 3824e6e9aa Fix potential XSS on the Settings / API page ...

The CSP policy already prevent the execution of inline Javascript.

2023-01-06 12:25:57 -08:00

..

about.php

Prevent the original page from being modified by the opened link

2020-09-14 19:28:12 -07:00

api.php

Fix potential XSS on the Settings / API page

2023-01-06 12:25:57 -08:00

application.php

Update code base and doc to use kanboard.org domain

2017-11-27 11:14:37 -08:00

board.php

Replace last occurences of "private" with "personal"

2020-04-06 20:36:20 -07:00

email.php

Add configuration parameter to disable email configuration from user interface

2017-02-05 11:54:27 -05:00

integrations.php

Move Gravatar to external plugin

2017-04-01 17:56:20 -04:00

keyboard_shortcuts.php

Move Gantt charts to external plugin

2017-04-01 17:04:18 -04:00

layout.php

Refactoring: added controlled middleware and changed response class

2016-05-15 18:31:47 -04:00

project.php

Rename "private" projects to "personal"

2020-02-29 18:51:52 -08:00

sidebar.php

Move calendar to external plugin

2017-04-01 15:43:36 -04:00

upload_db.php

Add missing CSRF check in saveUploadDB() method

2018-01-29 11:31:54 -08:00

webhook.php

Improve settings pages layout

2017-01-08 21:42:08 -05:00