Brett Zamir
7295eece09
Potentially breaking change: Prevent setting of extPath via URL and prevent setting of cross-domain or cross-folder extensions via URL, i.e., if the extensions string possesses the character ":", "/", or, to be extra safe, "\", (issue #4 of mailing list post "Agenda for resolving security issues"). extPath and extensions can still be meaningfully set freely via setConfig calls, e.g., "svgCanvas.setConfig({extPath: ..., extensions: ...});" if made before Editor.init() is called in svg-editor.js (which is called on a jQuery ready (i.e., DOMContentLoaded) event). To avoid modifying svg-editor.html, one could build an extension which loaded its own scripts as done by the simple extFunc() function in svg-editor.js, but this would occur a little later (Should we export extFunc() for this usage?).
git-svn-id: http://svg-edit.googlecode.com/svn/trunk@2671 eee81c28-f429-11dd-99c0-75d572ba1ddd
2014-02-10 05:33:05 +00:00
..
2013-10-14 01:50:42 +00:00
2012-03-20 08:58:24 +00:00
2014-02-02 01:06:25 +00:00
2010-12-01 17:54:11 +00:00
2013-02-23 21:32:09 +00:00
2012-02-23 02:48:21 +00:00
2010-03-12 20:59:43 +00:00
2010-08-20 19:27:57 +00:00
2014-01-31 13:06:43 +00:00
2011-02-23 21:06:26 +00:00
2012-09-16 18:53:27 +00:00
2013-10-14 02:02:54 +00:00
2014-01-31 02:23:40 +00:00
2014-01-31 02:23:40 +00:00
2014-01-31 02:13:37 +00:00
2014-01-31 02:13:37 +00:00
2014-01-31 08:57:22 +00:00
2014-01-31 08:57:22 +00:00
2014-01-31 02:13:37 +00:00
2014-01-31 02:13:37 +00:00
2012-02-23 02:48:21 +00:00
2014-01-31 02:13:37 +00:00
2014-01-31 01:05:03 +00:00
2014-01-31 01:05:03 +00:00
2014-01-31 01:05:03 +00:00
2014-01-31 01:05:03 +00:00
2013-09-23 18:55:52 +00:00
2014-01-31 13:06:43 +00:00
Potentially breaking change: Prevent setting of extPath via URL and prevent setting of cross-domain or cross-folder extensions via URL, i.e., if the extensions string possesses the character ":", "/", or, to be extra safe, "\", (issue #4 of mailing list post "Agenda for resolving security issues"). extPath and extensions can still be meaningfully set freely via setConfig calls, e.g., "svgCanvas.setConfig({extPath: ..., extensions: ...});" if made before Editor.init() is called in svg-editor.js (which is called on a jQuery ready (i.e., DOMContentLoaded) event). To avoid modifying svg-editor.html, one could build an extension which loaded its own scripts as done by the simple extFunc() function in svg-editor.js, but this would occur a little later (Should we export extFunc() for this usage?).
2014-02-10 05:33:05 +00:00
2010-01-12 20:39:03 +00:00
2014-01-31 10:40:52 +00:00
2014-01-31 01:05:03 +00:00
2014-01-31 02:13:37 +00:00
2014-02-01 16:13:51 +00:00
2014-01-31 02:13:37 +00:00
2014-01-31 02:13:37 +00:00