Martin Brennan 45b37a8bd1

FIX: Resolve pull hotlinked image and broken link issues for secure media URLs (#8777) ...

When pull_hotlinked_images tried to run on posts with secure media (which had already been downloaded from external sources) we were getting a 404 when trying to download the image because the secure endpoint doesn't allow anon downloads.

Also, we were getting into an infinite loop of pull_hotlinked_images because the job didn't consider the secure media URLs as "downloaded" already so it kept trying to download them over and over.

In this PR I have also refactored secure-media-upload URL checks and mutations into single source of truth in Upload, adding a SECURE_MEDIA_ROUTE constant to check URLs against too.

2020-01-24 11:59:30 +10:00

..

components

Revert "FIX: Redis fallback handler refactoring (#8771)" (#8776)

2020-01-24 09:20:17 +11:00

fabricators

FEATURE: Secure media allowing duplicated uploads with category-level privacy and post-based access rules (#8664)

2020-01-16 13:50:27 +10:00

fixtures

REFACTOR: Restoring of backups and migration of uploads to S3

2020-01-14 11:41:35 +01:00

helpers

FIX: parallel spec system needs a dedicated upload folder for each worker. (#8547)

2019-12-18 11:21:57 +05:30

import_export

DEV: clean up dependencies in spec

2019-10-02 14:50:54 +10:00

integration

UX: Include public groups in mentionable groups set (#8516)

2019-12-12 13:13:40 +02:00

integrity

DEV: Update markdown-it from 8.4.1 to 10.0.0 (#8164)

2019-10-08 13:00:22 +02:00

jobs

FIX: Resolve pull hotlinked image and broken link issues for secure media URLs (#8777)

2020-01-24 11:59:30 +10:00

lib

FEATURE: Update upload security status on post move, topic conversion, category change (#8731)

2020-01-23 12:01:10 +10:00

mailers

DEV: s/\$redis/Discourse\.redis (#8431)

2019-12-03 10:05:53 +01:00

models

DEV: fix deprecation warnings in specs

2020-01-23 16:37:48 +01:00

multisite

FIX: parallel spec system needs a dedicated upload folder for each worker. (#8547)

2019-12-18 11:21:57 +05:30

requests

DEV: fix deprecation warnings in specs

2020-01-23 16:37:48 +01:00

serializers

FEATURE: Secure media allowing duplicated uploads with category-level privacy and post-based access rules (#8664)

2020-01-16 13:50:27 +10:00

services

FEATURE: Replace existing badge owners when using the bulk award feature (#8770)

2020-01-23 14:14:58 -03:00

support

Revert "FIX: Redis fallback handler refactoring (#8771)" (#8776)

2020-01-24 09:20:17 +11:00

tasks

DEV: s/\$redis/Discourse\.redis (#8431)

2019-12-03 10:05:53 +01:00

views/omniauth_callbacks

FEATURE: Use full page redirection for all external auth methods (#8092)

2019-10-08 12:10:43 +01:00

rails_helper.rb

SECURITY: 2FA with U2F / TOTP

2020-01-15 11:27:12 +01:00