13 Commits (e8589bd199fc67d4d5b183b19acd8634a61a0b02)

Author	SHA1	Message	Date
Oliver Günther	6ef4211e77	Bump copyright to 2018 (#6171) ... [ci skip]	7 years ago
Oliver Günther	a5a5b60235	Don't set the header for feature specs ... It doesn't make sense since we won't send direct API requests anywhere.	7 years ago
Oliver Günther	5d84add246	Expire sessions in warden auth scope	7 years ago
Wieland Lindenthal	a3167b3b39	Fix specs for not having `onbeforeunload` anymore.	8 years ago
Oliver Günther	7cf11bb689	Update copyright notice	8 years ago
Oliver Günther	60cbf95b44	Fix escaping angular expressions when in isolated scope ... Isolated scopes do not inherit from rootScope and thus do not have `DOUBLE_LEFT_CURLY_BRACE`. However, every scope has a reference to the rootScope with `scope.$root` (https://docs.angularjs.org/api/ng/type/$rootScope.Scope)	8 years ago
Oliver Günther	1832ff91f0	[24050] Unescape formattable html strings inserted as ng-bind-html ... The description and all other formattable fields are applied to the dom with `ng-bind-html`. These directives never compile their contents, thus any escaped expression `{{ ... }}` entered by the user is never evaluated. We can either: 1. Compile the content needlessly just to remove escaped expressions. 2. Remove the escaped expression explicitly. This PR implements the second approach. https://community.openproject.com/work_packages/24050/activity	8 years ago
Oliver Günther	7fe77ac223	Add spec for correct escaping in wiki preview	8 years ago
Oliver Günther	5f8ebfdfc6	Add feature spec to test expiry of sessions	8 years ago
Oliver Günther	44a98b8155	Extend xss spec	8 years ago
Oliver Günther	43599a9179	Add feature spec for angular XSS	9 years ago