Philip Molares 35b0d39a12 added sanitation to the slideMode in frontmatter ...

This should prevent the issue mentioned in https://github.com/hackmdio/codimd/issues/1648

Specifically left out are
- dependency (user can't really include anything anyway, because CSP forbids most domains)
- autoSlideMethod (nothing our users should be able to change as they won't write JS to be affected by this)
- keyboard (this let's users write arbitrary code and seems therefore to problematic)

See:
https://github.com/hakimel/reveal.js/blob/3.9.2/README.md#configuration
Signed-off-by: Philip Molares <philip.molares@udo.edu>

2021-01-14 11:18:09 +01:00

..

lib

Remove pdf export code

2020-11-26 21:09:23 +01:00

cover.js

Replace CodiMD with HedgeDoc

2020-11-14 21:18:36 +01:00

extra.js

Don't store mermaid diagrams in innerHTML

2020-12-27 10:14:27 +01:00

history.js

Fix eslint warnings

2019-05-31 00:30:29 +02:00

htmlExport.js

Use JavaScript Standard Style (part 2)

2017-03-09 02:41:05 +08:00

index.js

Remove reference to nonexisting DOM element

2020-11-27 19:24:43 +01:00

locale.js

Add config option for cookie SameSite policy

2020-08-27 02:04:49 +02:00

mathjax-config-extra.js

Fix MathJax config not being picked up

2017-10-22 02:48:24 +02:00

pretty.js

Fix eslint warnings

2019-05-31 00:30:29 +02:00

render.js

Don't accept sandbox attribute

2019-10-22 12:04:12 +02:00

reveal-markdown.js

Remove the xss library from webpack

2018-11-10 20:27:07 +01:00

slide.js

added sanitation to the slideMode in frontmatter

2021-01-14 11:18:09 +01:00

utils.js

Update to migrate note url in the history of browser storage and cookie

2018-03-03 16:26:19 +08:00