mirror of
https://github.com/9001/copyparty.git
synced 2025-08-17 00:52:16 -06:00
by running dompurify after marked.parse if plugins are not enabled; adds no protection against the more practical approach of just putting a malicious <script> in an html file and uploading that, but one footgun less is one less footgun |
||
---|---|---|
.. | ||
deps-docker | ||
docker | ||
py2/queue | ||
pyinstaller | ||
strip_hints | ||
test | ||
copyparty-android.sh | ||
copyparty-repack.sh | ||
fusefuzz.py | ||
genlic.sh | ||
install-githooks.sh | ||
make-pypi-release.sh | ||
make-sfx.sh | ||
make-tgz-release.sh | ||
prep.sh | ||
profile.py | ||
rls.sh | ||
run-tests.sh | ||
sfx.ls | ||
sfx.py | ||
sfx.sh | ||
speedtest-fs.py | ||
toc.sh | ||
uncomment.py |