Skip to content

Commit

Permalink
2.3.8 release with security fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
spocke committed Nov 15, 2021
1 parent 6d2af80 commit 0d00239
Show file tree
Hide file tree
Showing 8 changed files with 13 additions and 12 deletions.
1 change: 1 addition & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
Tiny values the work of security researchers in improving the security of technology products worldwide. We welcome researchers who wish to responsibly disclose vulnerabilities in our products or systems. Note that we do not offer any “bug bounty” program or any form of payment for disclosed vulnerabilities. If you would like to report a vulnerability, please email infosec@tiny.cloud.
4 changes: 2 additions & 2 deletions js/jquery.plupload.queue/jquery.plupload.queue.js
Original file line number Diff line number Diff line change
Expand Up @@ -223,7 +223,7 @@ used as it is.

fileList.append(
'<li id="' + file.id + '">' +
'<div class="plupload_file_name"><span>' + file.name + '</span></div>' +
'<div class="plupload_file_name"><span>' + plupload.xmlEncode(file.name) + '</span></div>' +
'<div class="plupload_file_action"><a href="#"></a></div>' +
'<div class="plupload_file_status">' + file.percent + '%</div>' +
'<div class="plupload_file_size">' + plupload.formatSize(file.size) + '</div>' +
Expand Down Expand Up @@ -306,7 +306,7 @@ used as it is.

// Rename file and glue extension back on
file.name = targetInput.val() + ext;
targetSpan.html(file.name);
targetSpan.text(file.name);
targetInput.blur();
}
});
Expand Down
2 changes: 1 addition & 1 deletion js/jquery.plupload.queue/jquery.plupload.queue.min.js

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions js/jquery.ui.plupload/jquery.ui.plupload.js
Original file line number Diff line number Diff line change
Expand Up @@ -491,7 +491,7 @@ $.widget("ui.plupload", {
break;
}

message += " <br /><i>" + details + "</i>";
message += " <br /><i>" + plupload.xmlEncode(details) + "</i>";

self._trigger('error', null, { up: up, error: err } );

Expand Down Expand Up @@ -1313,7 +1313,7 @@ $.widget("ui.plupload", {
// Rename file and glue extension back on
if (e.keyCode === 13) {
file.name = nameInput.val() + ext;
nameSpan.html(file.name);
nameSpan.text(file.name);
}
nameInput.blur();
}
Expand Down
2 changes: 1 addition & 1 deletion js/jquery.ui.plupload/jquery.ui.plupload.min.js

Large diffs are not rendered by default.

4 changes: 2 additions & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -15,8 +15,8 @@
"Silverlight",
"moxie"
],
"version": "2.3.7",
"releaseDate": "2021-03-29",
"version": "2.3.8",
"releaseDate": "2021-11-15",
"author": "Ephox",
"contributors": [{
"name": "Davit Barbakadze",
Expand Down
4 changes: 2 additions & 2 deletions src/jquery.plupload.queue/jquery.plupload.queue.js
Original file line number Diff line number Diff line change
Expand Up @@ -223,7 +223,7 @@ used as it is.

fileList.append(
'<li id="' + file.id + '">' +
'<div class="plupload_file_name"><span>' + file.name + '</span></div>' +
'<div class="plupload_file_name"><span>' + plupload.xmlEncode(file.name) + '</span></div>' +
'<div class="plupload_file_action"><a href="#"></a></div>' +
'<div class="plupload_file_status">' + file.percent + '%</div>' +
'<div class="plupload_file_size">' + plupload.formatSize(file.size) + '</div>' +
Expand Down Expand Up @@ -306,7 +306,7 @@ used as it is.

// Rename file and glue extension back on
file.name = targetInput.val() + ext;
targetSpan.html(file.name);
targetSpan.text(file.name);
targetInput.blur();
}
});
Expand Down
4 changes: 2 additions & 2 deletions src/jquery.ui.plupload/jquery.ui.plupload.js
Original file line number Diff line number Diff line change
Expand Up @@ -491,7 +491,7 @@ $.widget("ui.plupload", {
break;
}

message += " <br /><i>" + details + "</i>";
message += " <br /><i>" + plupload.xmlEncode(details) + "</i>";

self._trigger('error', null, { up: up, error: err } );

Expand Down Expand Up @@ -1313,7 +1313,7 @@ $.widget("ui.plupload", {
// Rename file and glue extension back on
if (e.keyCode === 13) {
file.name = nameInput.val() + ext;
nameSpan.html(file.name);
nameSpan.text(file.name);
}
nameInput.blur();
}
Expand Down

0 comments on commit 0d00239

Please sign in to comment.