Régis Hanol
|
4536b5fe04
|
added a job to clean up orphan uploads
|
2013-10-15 11:15:48 +02:00 |
|
Sam
|
cf08d2c751
|
security: when login is required don't return the site node in the preload store
|
2013-10-15 09:50:49 +11:00 |
|
Régis Hanol
|
d80f4fa3f7
|
Merge pull request #1523 from dbarbera/avatar_formats_fix
add image authorization on upload_avatar
|
2013-10-14 05:33:25 -07:00 |
|
Sam
|
7df4e4afb9
|
security fix, anon should not be treated as though they can create anything
|
2013-10-13 09:54:48 +11:00 |
|
Sam
|
e5fbdde56f
|
filter params correctly from error log
|
2013-10-13 08:07:45 +11:00 |
|
dbarbera
|
9106596a9a
|
add image authorization on upload_avatar
|
2013-10-12 14:11:44 +02:00 |
|
Régis Hanol
|
23bf4436f5
|
FIX: avatar was attached to the user who uploaded it...
|
2013-10-12 10:55:41 +02:00 |
|
Robin Ward
|
af931f0444
|
Reverting the Sanitizer commit in case we have to do something urgent
before we deploy it early next week. It's in the branch `sanitizer` for
now.
This reverts commit 9e93d8ed52 .
|
2013-10-11 16:44:26 -04:00 |
|
Robin Ward
|
9e93d8ed52
|
Upgraded and refactored Sanitizing. Much less crap should get through now!
Conflicts:
app/assets/javascripts/discourse/components/syntax_highlighting.js
|
2013-10-11 16:25:40 -04:00 |
|
Neil Lalonde
|
3c2c6ab24b
|
Add sockpuppet spammer detection. Automatically flag posts if they are from new users (registered less than 24 hours ago) at the same IP address and one of them started the topic.
|
2013-10-11 13:34:05 -04:00 |
|
Régis Hanol
|
7938843b50
|
ooops. régis can't refactor...
|
2013-10-11 18:49:17 +02:00 |
|
Régis Hanol
|
35214f0b3a
|
Merge pull request #1522 from velesin/syntax_highlighting_context_refactoring
removes unused context binding from Discourse.SyntaxHighlighting
|
2013-10-11 09:46:47 -07:00 |
|
Régis Hanol
|
c38ba8acdd
|
add rss links to anonymous homepages
|
2013-10-11 18:43:29 +02:00 |
|
Régis Hanol
|
cf3c4fd743
|
no need for a computed property
|
2013-10-11 18:43:10 +02:00 |
|
Wojciech Zawistowski
|
c446cc6ce1
|
removes unused context binding from Discourse.SyntaxHighlighting
|
2013-10-11 18:37:18 +02:00 |
|
Wojciech Zawistowski
|
b4a6a5e841
|
removes unused context binding from Discourse.Lightbox
|
2013-10-11 17:40:30 +02:00 |
|
Robin Ward
|
fee2734aaa
|
Check for custom avatars by default now.
|
2013-10-11 11:09:53 -04:00 |
|
Robin Ward
|
20cba4e092
|
Never bind the poster expansion twice.
|
2013-10-10 15:18:38 -04:00 |
|
Wojciech Zawistowski
|
107932576e
|
removes redundant context binding
|
2013-10-10 18:33:24 +02:00 |
|
Robin Ward
|
ea9398467b
|
For @Sam - hide the poster expansion if you click on the avatar of the user who's expanded
|
2013-10-10 12:03:52 -04:00 |
|
Régis Hanol
|
ae72724648
|
add educational hint in the upload selector dialog
|
2013-10-10 17:54:44 +02:00 |
|
Neil Lalonde
|
c3fd79d61c
|
Fix rendering of muted topic button
|
2013-10-10 11:26:20 -04:00 |
|
Sam
|
b0465c517e
|
(experimental) added framework for filtering all sorts of internals in discourse and consuming by plugins
|
2013-10-10 18:45:40 +11:00 |
|
Sam
|
8afff108bf
|
css.scss makes rails 4 sad
|
2013-10-10 15:23:14 +11:00 |
|
Sam
|
b490fd2f88
|
Merge pull request #1513 from velesin/computed_self_refactoring
refactors Discourse.Computed to bind context to self
|
2013-10-09 21:16:19 -07:00 |
|
Sam
|
2a948c52a9
|
this setting needs to be pushed up to 15 so we will be able to nuke new spammer accounts
it is set to max_topics_in_first_day + max_replies_in_first_day
|
2013-10-10 10:45:27 +11:00 |
|
Sam
|
ad2ed5fe51
|
rate limits for topics and posts on first day
max_topics_in_first_day and max_replies_in_first_day
|
2013-10-10 10:32:03 +11:00 |
|
Régis Hanol
|
3854c2d24f
|
Merge pull request #1510 from velesin/model_refactoring
refactors Discourse.Model
|
2013-10-09 09:26:15 -07:00 |
|
Wojciech Zawistowski
|
708a55cb38
|
refactors Discourse.Computed to bind context to self
|
2013-10-09 18:24:33 +02:00 |
|
Wojciech Zawistowski
|
41a4f15d62
|
removes unused context binding from Discourse.Site
|
2013-10-09 18:06:48 +02:00 |
|
Wojciech Zawistowski
|
56a519c583
|
refactors Discourse.Model to bind context to self plus some minor clean-ups
|
2013-10-09 18:00:55 +02:00 |
|
Neil Lalonde
|
4a0b17bb16
|
Pressing enter in username field of login form will submit the form
|
2013-10-09 11:07:42 -04:00 |
|
Neil Lalonde
|
24598c80af
|
Improve login modal on mobile
|
2013-10-09 10:16:22 -04:00 |
|
Sam
|
939a452293
|
require dependency was leading to errors in dev
|
2013-10-09 17:22:41 +11:00 |
|
Sam
|
7993845bfa
|
add current_user_provider so people can override current_user bevior cleanly, see
http://meta.discourse.org/t/amending-current-user-logic-in-discourse/10278
|
2013-10-09 15:11:54 +11:00 |
|
Robin Ward
|
8e6ae0e278
|
Only show filter button if the user has more than 2 posts
|
2013-10-08 15:44:36 -04:00 |
|
Neil Lalonde
|
bccb37b6f3
|
When creating a topic, don't select a category by default when allow_uncategorized_topics is false. Also, added category validation on the server to enforce allow_uncategorized_topics.
|
2013-10-08 14:41:20 -04:00 |
|
Neil Lalonde
|
32af23884e
|
FIX: category validation in composer was still using categoryName instead of categoryId
|
2013-10-08 14:41:20 -04:00 |
|
Régis Hanol
|
94d68d2453
|
more vertical space in the upload selector dialog
|
2013-10-08 19:48:27 +02:00 |
|
Régis Hanol
|
2e5e6b8c15
|
better file upload dialog
|
2013-10-08 18:58:24 +02:00 |
|
Robin Ward
|
0bda906da4
|
Merge pull request #1494 from ScotterC/present-user-name
Presenting name for user stream description
|
2013-10-08 08:42:59 -07:00 |
|
Scott Carleton
|
256d82b916
|
Present Name for stream description
|
2013-10-08 11:40:16 -04:00 |
|
Robin Ward
|
50c74237cb
|
Supress full name in expansion if it's the same as the username
|
2013-10-08 11:28:32 -04:00 |
|
Robin Ward
|
e7935d4263
|
Merge pull request #1501 from velesin/debounce_promise_tests
adds unit tests for Discourse.debouncePromise
|
2013-10-08 07:56:07 -07:00 |
|
Neil Lalonde
|
6713db7133
|
Close notifications dropdown on mobile after you click something
|
2013-10-07 16:11:54 -04:00 |
|
Robin Ward
|
cf4666d363
|
FIX: If the user asks for 0 similar topics, don't show an empty box
|
2013-10-07 15:14:01 -04:00 |
|
Robin Ward
|
744266374a
|
FIX: Invalid i18n string appearing at bottom of topic
|
2013-10-07 15:01:51 -04:00 |
|
Robin Ward
|
6949bc6611
|
Make clickable area for progress much bigger on mobile
|
2013-10-07 14:41:17 -04:00 |
|
Robin Ward
|
75aaafc06e
|
Don't show the user expansion on mobile
|
2013-10-07 14:32:15 -04:00 |
|
Wojciech Zawistowski
|
034d00b83a
|
adds unit tests for Discourse.debouncePromise
|
2013-10-07 17:45:09 +02:00 |
|