Visiting mass-tag URL directly ignored masstag privileges and showed tag/untag controls (although didn't show the controls in the header). After this change, bypassing mass tag privileges got a little bit harder. (It's still possible for the user to talk directly to the API after all.) |
||
---|---|---|
.. | ||
controllers | ||
controls | ||
models | ||
util | ||
views | ||
.gitignore | ||
api.js | ||
config.js | ||
events.js | ||
main.js | ||
router.js | ||
tags.js | ||
templates.js |