103 Commits (c769a33392c4dedbabfb1fa1fda5c8bb30b84c78)

Author	SHA1	Message	Date
Simon McVittie	ebe140201e	comments: sanitize the body of each comment before posting it ... This should ensure that users can't "break out" from the enclosing <div>, making it impossible to forge comments (assuming htmlscrubber is enabled, and so is either htmlbalance or htmltidy).	2008-12-11 21:14:03 +00:00
Simon McVittie	57e40b9ce5	Fix typo that led to comments being blanked	2008-12-11 21:14:02 +00:00
Simon McVittie	3d4aa065d6	postcomment: Rename plugin to comments, use *._comment files ... The PageSpec is still called "postcomment" since that's what it means.	2008-12-11 21:14:02 +00:00