4 commits

Author	SHA1	Message	Date
Tom Hughes	0d70728fe2	Escape user display names.	2008-03-04 16:51:13 +00:00
Tom Hughes	9f909d7447	Add a few more escape calls to prevent nasty HTML being rendered. Also ... switch to using sanitize() instead of h() to escape message bodies. This is not quite as safe as there is no guarantee that the HTML scanner it uses will find everything, but is does allow benign HTML tags to be displayed again.	2008-01-15 18:22:08 +00:00
Tom Hughes	7b172efeb6	Don't indicate if a message has been read in the outbox view.	2007-11-21 23:54:14 +00:00
Mikel Maron	d736a158be	message outbox	2007-11-21 18:24:29 +00:00