Tom Hughes 9f909d7447 Add a few more escape calls to prevent nasty HTML being rendered. Also ... switch to using sanitize() instead of h() to escape message bodies. This is not quite as safe as there is no guarantee that the HTML scanner it uses will find everything, but is does allow benign HTML tags to be displayed again.		2008-01-15 18:22:08 +00:00
..
controllers	autocomplete (not compiled for now) and start of tile support	2007-12-23 12:59:59 +00:00
helpers	Specify display_name and tag explicitly when generating pagination links	2007-11-30 01:27:14 +00:00
models	Mark mails as auto submitted. Closes #627.	2008-01-06 13:21:50 +00:00
views	Add a few more escape calls to prevent nasty HTML being rendered. Also	2008-01-15 18:22:08 +00:00