Commit Graph

26287 Commits

Author SHA1 Message Date
Sam
3be4982186 clean up drag on iOS handling, we need it bound earlier 2018-04-30 15:58:03 +02:00
Sam
3fee06ae59 improve prev hack 2018-04-30 15:57:58 +02:00
Sam
2e0189afe9 FIX: dragging of timeline was flaky on iOS 2018-04-30 15:57:52 +02:00
Neil Lalonde
3b220d6102 Version bump to v1.9.6 2018-04-24 10:38:53 -04:00
Arpit Jalan
8d1e8fa712 SECURITY: do not show private topic title on /unsubscribed page 2018-04-16 20:05:31 +05:30
Régis Hanol
940b3a7c74 SECURITY: prevent XSS when showing diffs 2018-04-16 15:47:48 +02:00
Arpit Jalan
3edd6622df SECURITY: santize tags when creating new topic via URL 2018-04-16 01:07:47 +05:30
Arpit Jalan
27972c1202 SECURITY: escape HTML entities from topic title 2018-04-16 01:05:56 +05:30
Arpit Jalan
411696b85e SECURITY: do not disclose topic titles on /unsubscribed page to unauthorized users 2018-04-16 01:05:56 +05:30
Neil Lalonde
0bf1c476d7 Version bump to v1.9.5 2018-04-13 10:06:17 -04:00
Guo Xiang Tan
9c2be4dcac FIX: Restorer wasn't rolling back if restore fails.
* This only applies to backup file taken with
  pg_dump 10.3+ and pg_dump 9.5.12+.
2018-04-06 09:45:42 +08:00
Guo Xiang Tan
c39167f5da Fix incorrect function name. 2018-04-05 07:22:10 +08:00
Guo Xiang Tan
f038903423 Clean up unused function left in the database. 2018-04-05 07:22:03 +08:00
Michael Brown
6307790168 backup restorer: tidy pg_dump schema portability logic, add test 2018-04-04 16:51:25 +08:00
Michael Brown
6691a400da restorer: clarify logging 2018-04-04 16:51:20 +08:00
Guo Xiang Tan
e2f6d8b5ca FIX: Restorer was not extracting the patch version in dump file. 2018-04-04 16:51:00 +08:00
Guo Xiang Tan
833314f4b4 Improve grep pattern in restorer. 2018-04-04 16:50:50 +08:00
Guo Xiang Tan
837c0b9a77 Fix version check in restorer. 2018-04-04 16:50:40 +08:00
Guo Xiang Tan
3bccd8c8f3 FIX: Restore process for dump taken with pg_dump 10.3+.
* Since we can no longer restore into a different schema,
  we will move tables in the public schema into the backup schema
  first before restoring the dump file which goes into the public
  schema. The downside to this approach is that we will increase
  the downtime experienced during the restore process. Downtime
  would equal the duration of restoring the dump file.
2018-04-04 16:50:27 +08:00
Will Jordan
ab1ca72865 single quote password in restore command
> Followup to #3283. Quotes passwords passed to shell for backup restore.
2018-04-04 16:50:08 +08:00
Sam
c2ff0f1f3c Update libv8 from 5.9 to 6.3 2018-04-04 16:44:22 +08:00
Neil Lalonde
e24d25ce01 Version bump to v1.9.4 2018-03-07 15:16:48 -05:00
Neil Lalonde
e23b8e7905 SECURITY: sanitize topic title when staff is viewing a user's past flagged posts and deleted topics 2018-03-02 11:59:36 -05:00
Sam
e7f83358aa SECURITY: ensure users have permission when moving categories 2018-03-02 12:13:53 +11:00
Neil Lalonde
a745aa4a3e Version bump to v1.9.3 2018-02-15 17:46:48 -05:00
Sam
7174b100f9 SECURITY: correct local onebox category checks 2018-02-14 10:44:06 +11:00
Robin Ward
f655936b9d SECURITY: Prevent robots from indexing more routes
These routes could contain sensitive material and should never be
indexed for content.
2018-02-04 13:27:33 -05:00
Neil Lalonde
670450bcfc Version bump to v1.9.2 2018-01-23 16:50:09 -05:00
Gerhard Schlager
0ee2c2363b SECURITY: email domain whitelist could be bypassed 2018-01-17 21:49:43 +01:00
Neil Lalonde
b9bc27e539 Version bump to v1.9.1 2018-01-11 15:09:48 -05:00
Arpit Jalan
a13b8182e9 FIX: rescue login required / broken images 2018-01-11 14:30:34 -05:00
Arpit Jalan
f752c22104 FIX: handle invalid password reset token 2018-01-11 14:30:32 -05:00
Vinoth Kannan
8875993ae1 FIX: URI must be ascii only for URI.parse command 2018-01-11 14:30:29 -05:00
Arpit Jalan
243643bf76 FIX: render error message when backup download fails 2018-01-11 14:30:26 -05:00
Joffrey JAFFEUX
253711c233 FIX: correct shushing_face name 2018-01-11 14:30:22 -05:00
Arpit Jalan
bb4eab1267 FIX: do not create duplicate topics
https://meta.discourse.org/t/duplicate-http-https-topics-are-randomly-created/77190
2018-01-11 14:30:19 -05:00
Guo Xiang Tan
7c03b31006 Make rubocop happy. 2018-01-04 09:05:22 +08:00
Neil Lalonde
eaf083f9f0 Version bump to v1.9.0 2018-01-03 16:49:31 -05:00
Neil Lalonde
f83a39f8ba Merge master 2018-01-03 16:49:06 -05:00
Robin Ward
df163cbf61 Add a deleted-post class to the deleted post action 2018-01-03 13:56:47 -05:00
Robin Ward
dbd2d29abe Allow the deleted post indicator on a post to be extended. 2018-01-03 13:34:26 -05:00
Neil Lalonde
e3965b4492 Update translations 2018-01-03 12:21:03 -05:00
Gerhard Schlager
ceb7590bcb FIX: bounced email can contain multiple status codes 2018-01-03 17:59:20 +01:00
Arpit Jalan
7ca2e6a80c fix the build 2018-01-03 17:35:36 +05:30
Arpit Jalan
06e509057e FIX: handle missing user records 2018-01-03 17:18:13 +05:30
Guo Xiang Tan
ad02437358 FIX: Missing post/topic created web hooks due to race condition. 2018-01-03 17:24:01 +08:00
Guo Xiang Tan
9644569a28 FIX: Wildcard webhooks could send duplicated events. 2018-01-03 17:00:44 +08:00
Joffrey JAFFEUX
b295c03001
FIX: select single choice as default when building a poll 2018-01-03 09:23:15 +01:00
Guo Xiang Tan
647cf7545d Fix randomly failing spec. 2018-01-03 14:42:16 +08:00
Guo Xiang Tan
af1e2865f7 Re-introduce ability to handle basic authentication in smoke tests. 2018-01-03 14:24:06 +08:00