0392fce6c3
* Fix XSS by parsing player counts as raw data (instead of parsing it) * Ensure the returned favicon is a data URI * Force server favicon size to 64px * Increase specificity of data URI validation The previous commit would happily accept any domain (or subdomain) that started with "data" |
||
---|---|---|
.. | ||
graph.js | ||
site.js | ||
util.js |