Files
fizzy/app/javascript/controllers
Mike Dalessio e9cb2956ee Lightbox uses Stimulus target callbacks instead of data-action
Remove data-action from the sanitizer allowlist to disallow injection
of potentially malicious Stimulus actions in user-provided
content. The lightbox controller now uses imageTarget callbacks to
handle clicks on image links.

Also add the file name as a caption in the light box, and fix the
caption color for dark mode visibility.
2025-12-13 17:06:03 -05:00
..
2024-06-21 13:19:56 +01:00
2025-07-24 14:49:53 -05:00
2025-04-09 14:09:08 -05:00
2024-06-21 13:19:56 +01:00
2025-09-12 11:01:56 +02:00
2025-07-22 22:42:36 -05:00
2025-09-22 15:52:30 -05:00