Files
fizzy/config/initializers
Mike Dalessio e9cb2956ee Lightbox uses Stimulus target callbacks instead of data-action
Remove data-action from the sanitizer allowlist to disallow injection
of potentially malicious Stimulus actions in user-provided
content. The lightbox controller now uses imageTarget callbacks to
handle clicks on image links.

Also add the file name as a caption in the light box, and fix the
caption color for dark mode visibility.
2025-12-13 17:06:03 -05:00
..
2025-12-11 11:52:38 +01:00
2024-06-21 13:19:56 +01:00
2024-06-21 16:42:48 +01:00
2025-12-01 16:25:23 +01:00
2025-12-11 11:28:32 +00:00
2024-06-21 13:19:56 +01:00
2025-11-28 15:53:58 +01:00
2025-12-13 12:41:37 -05:00