 Liam Brydon
|
4246460f91
|
Merge remote-tracking branch 'origin/develop' into fix/xss
# Conflicts:
# pyproject.toml
# uv.lock
|
2025-11-07 08:49:10 +13:00 |
|
|
Liam Brydon
|
44b646e58a
|
Merge remote-tracking branch 'origin/develop' into fix/xss
# Conflicts:
# templates/modals/collections/new_model_modal.html
|
2025-11-07 08:34:33 +13:00 |
|
|
Liam Brydon
|
2194b097ae
|
remove 'a' from allowed html tags
|
2025-11-06 10:33:22 +13:00 |
|
|
Liam Brydon
|
4524b8fdf3
|
moved cleaning to create where possible. Changed nh_safe to safe as we assume everything was cleaned in the first place
|
2025-11-06 09:46:30 +13:00 |
|
|
Liam Brydon
|
c663eaf7bd
|
comment
|
2025-10-22 10:55:49 +13:00 |
|
|
Liam Brydon
|
ec0fc8cdc1
|
add error for username/email containing html. Removed checks for SMILES/SMARTS. Updated html to use the nh_safe template tag. #72
|
2025-10-22 10:47:35 +13:00 |
|
|
Liam Brydon
|
61346c4097
|
nh3 clean is now used on all free-text fields to ensure only approved html will be saved to the database. #72
|
2025-10-21 10:09:10 +13:00 |
|
|
Liam Brydon
|
43bce8a4e1
|
added nh_safe filter in envipytags.py and updated some of the existing 'safe' to 'nh_safe'
|
2025-10-21 09:10:28 +13:00 |
|
|
Liam Brydon
|
8d955d685c
|
fixed XSS attack on pathway description and on scenario additional information fields. #72
|
2025-10-15 15:13:10 +13:00 |
|
|
Liam Brydon
|
17744294cc
|
start towards #72. Added nh3 and fixed package description XSS attack
|
2025-10-15 12:24:36 +13:00 |
|
|
Liam Brydon
|
b45c99f7d3
|
fixed calls to create MLRelativeReasoning during bootstrap.py and test_model.py
|
2025-08-22 11:28:01 +12:00 |
|