Allan Odgaard ffd6271a69 Allow disabling TextMate’s JavaScript API for commands with HTML output ...

This is done by setting the ‘disableJavaScriptAPI’ key to ‘true’ in the tmCommand file.

The rationale behind this is that a command like “HTML → Show Preview” is using the HTML output view with user data which should not have access to the special TextMate JavaScript object, for example a user may have a `<script>` tag that loads JavaScript from a CDN, and such script would effectively have shell access to the user’s machine.

2017-07-12 10:35:31 +02:00

..

resources

Remove NSPrincipalClass from framework bundles’s Info.plist

2016-10-31 17:30:30 +07:00

src

Allow disabling TextMate’s JavaScript API for commands with HTML output

2017-07-12 10:35:31 +02:00

tests

Sanitize output from TextMate.system()

2014-04-01 16:01:19 +07:00

target

Update include statements and link declarations

2016-09-11 12:47:39 +02:00