| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 4 days | Remove safeTags, decodeChat, and prepChat | Osmium Sorcerer | |
| Following the removal of innerHTML manipulation, we no longer need these sanitization functions. I've reviewed every safeTags call site to make sure the outputs don't end up anywhere unsafe, and malicious input can't malipulate DOM or execute code. These values either end up either as plain text (textContent, innerText, createTextNode, title, option) or as a URL path to request assets to the server (encoded using encodeURI). That is, if safeTags was even effective, considering all that function did was replace '<' and '>' symbols with Unicode lookalikes. Even the comment was suggesting the use of fundamentally safer functions instead of these hacks. Replace remaining uses of prepChat with unescapeChat as we still need to do the token substitution (like "<and>" to "&"). decodeChat was escaping Unicode sequences like \uXXXX, but I don't see the reason for this, AO2 Client doesn't have this feature, and considering WebSocket text frames are strictly UTF-8, we don't need these encodings. | |||
| 4 days | Eliminate innerHTML manipulation | Osmium Sorcerer | |
| Construct DOM nodes directly instead of trying to sanitize every input string and dynamically updating HTML. Replace all uses of innerHTML with textContent, replaceChildren, and appendChild. This removes the need to use safeTags and replace newlines, but now requires preserving whitespace via CSS pre-wrap. Every OOC chat line is now placed into its own element instead of simply being appended to the log. This might be worse, and createTextNode is another alternative. | |||
| 2026-03-18 | dont skip empty descriptions | stonedDiscord | |
| 2025-01-30 | Prettified Code! | stonedDiscord | |
| 2025-01-30 | change serverlist to use detail tag | stonedDiscord | |
| prep for onhover description | |||
| 2025-01-25 | whoops | stonedDiscord | |
| 2024-12-12 | Prettified Code! | stonedDiscord | |
| 2024-12-12 | get rid of sageTags in a few places | stonedDiscord | |
| plan is to migrate to createTextNode | |||
| 2024-11-20 | Prettified Code! | stonedDiscord | |
| 2024-04-13 | nintendo can't do wss | stonedDiscord | |
| 2023-11-30 | Move where we set server.online | David Skoland | |
| 2023-11-30 | Make localhost and singleplayer fill the type correctly | David Skoland | |
| 2023-11-30 | Make online non-nullable | David Skoland | |
| 2023-11-20 | Remove subdomain terribleness and split clientURL into a function | David Skoland | |
| 2023-11-20 | host isn't used | David Skoland | |
| 2023-11-20 | Fix domain tricks for localhost | David Skoland | |
| 2023-11-20 | More protocol magic | David Skoland | |
| 2023-11-20 | Missing colon | David Skoland | |
| 2023-11-20 | Need to adjust http/s as well | David Skoland | |
| 2023-11-20 | Warning about no ws port | David Skoland | |
| 2023-11-20 | Nice off-by-one error bro | David Skoland | |
| 2023-11-20 | Remove debug statement | David Skoland | |
| 2023-11-20 | Make Join button open in new tab | David Skoland | |
| 2023-11-20 | Remove wayward ) | David Skoland | |
| 2023-11-20 | Add setServ back | David Skoland | |
| also known as "whoops, we actually needed that code" This changes "Online" to "Players", and will only show the playercount reported by masterserver. It's a bit disingenuous to show "Online" if we can't confirm that we can actually connect to it. | |||
| 2023-11-20 | Remove everything related to server connections | David Skoland | |
| 2023-11-20 | Do not connect to server on mouseover | David Skoland | |
| 2023-11-20 | Yeet check_https | David Skoland | |
| 2023-11-20 | Use current host in https redirect instead of hardcoding | David Skoland | |
| 2023-11-20 | Change ip to connect and include protocol | David Skoland | |
| 2023-11-18 | Real async | David Skoland | |
| 2023-11-18 | Add playercount to serverlist | David Skoland | |
| 2023-11-18 | remove debug log | David Skoland | |
| 2023-11-18 | Fix host | David Skoland | |
| 2023-11-18 | Add players field | David Skoland | |
| 2023-11-18 | Remember to populate servers as well | David Skoland | |
| 2023-11-18 | Remove unused variables | David Skoland | |
| 2023-11-18 | Slimmer code in main function | David Skoland | |
| 2023-11-18 | Refactor master.ts | David Skoland | |
| 2023-11-13 | Add serverName to serverlist link | David Skoland | |
| 2023-10-16 | no https | stonedDiscord | |
| 2023-09-20 | autoformat with eslint | stonedDiscord | |
| 2023-09-16 | auto redirect so i don't have to deal with tech support so much | stonedDiscord | |
| 2022-09-23 | swap lines | stonedDiscord | |
| 2022-09-23 | no more undefined | stonedDiscord | |
| 2022-03-29 | delete index.html in masterlist | stonedDiscord | |
| 2022-03-28 | what was this still doing here | stonedDiscord | |
| 2022-03-28 | don't need double slashes | stonedDiscord | |
| 2022-03-28 | list http links even when coming from a https page | stonedDiscord | |
| 2022-03-23 | fix strict errors in master.ts | stonedDiscord | |
 |
index : webao | |
| WebAO fork | Osmium Sorcerer |
| aboutsummaryrefslogtreecommitdiff |