Commit Graph

11 Commits

Author SHA1 Message Date
Jérémy DECOOL ba2853caac Prevent target='_blank' vulnerability on dynamic link 2017-02-12 11:01:36 +01:00
Andrew Dolgov 967f0619c7 force ngettext() count argument type to string 2017-01-22 10:18:43 +03:00
Anders Kaseorg 0e653f751e Make _DISABLE_FEED_BROWSER also disable the updateFeedBrowser RPC
The undocumented _DISABLE_FEED_BROWSER option added in commit
c39befacb2 turns off the UI for looking
at which feeds other users are subscribed to, but it did not prevent
you from manually constructing an RPC call to get the same data.  This
was a privacy risk for those who consider _DISABLE_FEED_BROWSER
important.

Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2015-05-21 23:53:58 -04:00
Andrew Dolgov 4a80c57c50 remove some unused code reported by phpmd 2014-02-19 15:42:52 +04:00
Andrew Dolgov d3b0e3487e fix xgettext extraction of plural forms, replace wrong ngettext() calls with _ngettext(), rebase translations 2013-09-02 13:09:32 +04:00
Andrew Dolgov a42c55f02b fix blank character after opening bracket in function calls 2013-04-17 18:34:18 +04:00
Andrew Dolgov 6322ac79a0 remove $link 2013-04-17 16:48:41 +04:00
Tomas Chvatal 243b050a0a Fix plural forms on archived articles. 2013-03-24 12:42:50 +01:00
Andrew Dolgov 23f36f75ab feedbrowser: fix short tag 2012-12-27 01:16:18 +04:00
Andrew Dolgov c2167866ce move mark/pub/feed icons to svg 2012-12-25 14:01:33 +04:00
Andrew Dolgov 55c7f0923e split feedbrowser into a separate file 2012-12-24 15:58:29 +04:00