snipe-it/app
Brady Wetherington 9a224a07ba
Modified how we do Select2 dynamic drop-down menus to be more secure (#9079)
* Modified how we do Select2 dynamic drop-down menus to be more secure

As noted by the author of select2, the more-secure way of creating
rich Select-dropdowns is to use jquery to create HTML snippets and
carefully modify text attributes within there. This prevents any
XSS from being brought to the page. As a side-effect, the extra
escaping that we had to do in all of the internal selectlist calls
is now no longer necessary, and has been removed. Rebased and
squashed from the original.

* Rebuilt all assets, but this still feels like it's too much stuff in here.

* Whoops, need to run that in dev, not prod
2021-02-02 15:55:21 -08:00
..
Console Use snipe-logo.png as default in settings seeder 2020-12-21 11:36:43 -08:00
Events Assorted licenses UI fixes while testing. 2020-05-12 14:38:21 -04:00
Exceptions Suppress OAuth token errors 2021-01-12 08:58:40 -08:00
Helpers Fixed #8749 - added more default colors to prevent missing index in pie chart math 2020-11-18 07:06:14 -08:00
Http Modified how we do Select2 dynamic drop-down menus to be more secure (#9079) 2021-02-02 15:55:21 -08:00
Importer Added a clause that lets the function that updates the department to fail gracefully if no dept. name is provided in the CSV passed to the Importer. (#9078) 2021-02-02 12:23:36 -08:00
Jobs Version 3 - hold onto your butts 2016-03-25 01:18:05 -07:00
LegacyEncrypter Minor code cleanup bits and bobs (#6805) 2019-03-13 20:12:03 -07:00
Listeners Fixed checkin/checkout notification crashing 2020-09-11 16:10:18 -07:00
Models Added support for radio buttons in Custom Fields. (#9053) 2021-01-27 14:41:58 -08:00
Notifications Refactor Expected Checkin Notification into markdown and enable translation (#8236) 2020-11-12 15:09:40 -08:00
Observers Minor code cleanup bits and bobs (#6805) 2019-03-13 20:12:03 -07:00
Policies Fixed non-superadmin gate permissions for kits (#9029) 2021-01-26 11:56:42 -08:00
Presenters Depreciation detail view fixes [ch15776] (#9059) 2021-01-27 17:44:05 -08:00
Providers Fixed non-superadmin gate permissions for kits (#9029) 2021-01-26 11:56:42 -08:00
Services Only overwrite notes if the LDAP user is new 2020-12-02 11:00:18 -08:00