jcarr
/
noVNC
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
noVNC/include
History
Solly Ross 15ce2f71eb Use textContent instead of innerHTML 
Previously, setting `innerHTML` was used to display the statuses.  These
could include content communicated from the remote VNC server, allowing
the remove VNC server to inject HTML into the noVNC page.

This commit switches all uses of `innerHTML` to use `textContent`, which
is not vulnerable to the HTML injection.
 		2017-01-12 11:58:22 -05:00
..
chrome-app tcp-client.js: after read, try read again. 2012-09-17 17:15:50 -05:00
Orbitron700.ttf Add local copy of Orbitron font. 2011-09-27 16:53:09 -05:00
Orbitron700.woff Add local copy of Orbitron font. 2011-09-27 16:53:09 -05:00
base.css Use a consistent naming convention for elements 2016-05-27 16:14:25 +02:00
base64.js Cleanup and Test: base64.js 2014-09-15 16:46:02 -04:00
black.css Use a consistent naming convention for elements 2016-05-27 16:14:25 +02:00
blue.css Use a consistent naming convention for elements 2016-05-27 16:14:25 +02:00
des.js Cleanup: DES code 2014-09-15 16:46:02 -04:00
display.js Make sure to copy arrays when using render queue 2016-02-24 16:29:34 -05:00
inflator.js Make sure Pako always has enough room 2015-09-23 09:53:00 -04:00
input.js Add fallback value for devicePixelRatio 2016-05-12 16:43:19 +02:00
keyboard.js Fixes #309, make use of keysym.js 2014-11-26 09:24:13 +01:00
keysym.js Fixes issue #435 - added missing comma in keysym.js 2015-02-03 13:04:16 +01:00
keysymdef.js Keyboard Handling [7/8]: Replace keysym table with optimized version 2013-12-05 12:31:50 -05:00
logo.js Add logo, favicon. 2011-02-03 11:04:32 -06:00
playback.js Use Typed Arrays for the Websock receive queue 2015-08-06 14:47:03 -04:00
rfb.js Proper error handling for tight filters 2016-06-10 17:15:42 +02:00
ui.js Use textContent instead of innerHTML 2017-01-12 11:58:22 -05:00
util.js Create RFB object on connect 2015-03-26 17:09:05 -04:00
websock.js Fix occasional error with sending while readyState !== 1 2016-04-30 02:26:17 +02:00
webutil.js Adds missed line from PR 597 2016-04-13 12:53:37 -05:00