Commit Graph

9016 Commits

Author SHA1 Message Date
Robin Ward
56f5b21a90 SECURITY: Validate the entity when downloading a CSV 2017-05-19 16:01:27 -04:00
Robin Ward
067a54f0df FIX: Regression when clicking on post date 2017-05-04 13:51:24 -04:00
Guo Xiang Tan
989d52a854 FIX: Show share popup only for valid buttons. 2017-05-04 11:20:06 -04:00
Guo Xiang Tan
790acfd99f SECURITY: XSS issue in share popup if invalid link is passed in. 2017-05-04 11:07:49 -04:00
Guo Xiang Tan
db41af1c3c SECURITY: CSRF vulnerabilities in Admin::BackupsController. 2017-03-23 10:42:21 +08:00
Guo Xiang Tan
8c5e13afd6 SECURITY: Only allow users to resend activation email with a valid session.
* Improve error when an active user tries to request for an activation email.
2017-03-13 20:57:17 +08:00
Guo Xiang Tan
395f43d92f FIX: Don't mark user as active if verified email is different. 2017-03-13 20:57:02 +08:00
Guo Xiang Tan
415bad645e FIX: Mobile topic timeline broken on Chrome 56.
* See https://developers.google.com/web/updates/2017/01/scrolling-intervention.
  From Chrome 56 onwards, `touchstart` event listeners are treated as passive
  by default which does not call `preventDefault` resulting in the page
  scrolling when topic timeline handle is being dragged.
2017-02-27 13:21:41 +08:00
Sam
5fc70471be UX: less restrictive selector to allow for plugin outlets
Currently plugin outlets in LIs will generate a wrapping SPAN,
this makes an allowence in core for nave extenstions (like solved does)
2017-02-02 12:18:22 -05:00
Robin Ward
8f34c2332d Version bump to v1.7.1 2017-01-13 11:08:58 -05:00
Guo Xiang Tan
0f574f641e UX: Truncate topic link title/URL on desktop to prevent overflow. 2017-01-12 12:24:39 +08:00
Jeff Atwood
240c4870cf FIX: add noopener to website field in user profile 2017-01-11 15:38:37 -08:00
Arpit Jalan
e793caf3e3 FIX: only allow CSV file to be uploaded for bulk invite 2017-01-11 16:26:01 +05:30
Guo Xiang Tan
1758af9a1d FIX: Perform emoji unescape for topic titles in quotes. 2017-01-11 17:23:13 +08:00
Ola Christensson
82fab2343f Display tabs with smaller widths for code blocks
The default browser behavior is a tab width of 8 characters. This changes the width to 4 characters.
2017-01-10 10:06:53 +01:00
Guo Xiang Tan
cbc6aee137 UX: Display large numbers with delimiters. 2017-01-09 15:56:02 +08:00
Guo Xiang Tan
aa9ac0d8b2 Make eslint happy. 2017-01-09 13:59:00 +08:00
Guo Xiang Tan
fed7218deb UX: Observe changes to plugin to hide/show plugin admin link without refresh. 2017-01-09 13:56:15 +08:00
Guo Xiang Tan
e721e31699 FIX: Login modal on mobile does not submit on enter. 2017-01-09 13:20:53 +08:00
Guo Xiang Tan
4a7d6ea751 Make eslint happy. 2017-01-09 11:24:55 +08:00
Guo Xiang Tan
c260a4e34d FIX: Can't add categories when creating a new web hook. 2017-01-09 11:22:35 +08:00
Neil Lalonde
be2fa971df Merge master 2017-01-06 15:56:48 -05:00
Arpit Jalan
c834d591a3 use Ember.set() to set the dasherized_name property 2017-01-06 23:13:31 +05:30
Robin Ward
1b92d44fb2 FIX: A component referenced the controller 2017-01-06 10:45:48 -05:00
Guo Xiang Tan
389e1d0bd5 Add acceptance JS tests for group membership button. 2017-01-06 11:56:10 +08:00
Guo Xiang Tan
a4e7657bbf FIX: Missing action to show login modal on group page. 2017-01-06 11:40:32 +08:00
Robin Ward
7c8095294d FIX: Raw plugin outlets were broken 2017-01-05 11:38:57 -05:00
Arpit Jalan
6d26e348b6 FIX: 'add permalink' feature was broken 2017-01-05 18:50:17 +05:30
Régis Hanol
caf704068c Merge pull request #4635 from caugner/fix-add-emoji-custom-class
FIX: Add emoji-custom class in custom emojis list.
2017-01-05 09:47:30 +01:00
Claas Augner
9710b04c31
UX: Add icon for bookmarks report 2017-01-05 02:07:38 +01:00
Claas Augner
2c723f8323
FIX: Add emoji-custom class in custom emojis list. 2017-01-04 23:54:03 +01:00
Robin Ward
846cd523b6 FIX: Broken plugin outlet 2017-01-04 11:52:19 -05:00
Guo Xiang Tan
43d950f813 FIX CSS for autocomplete. 2017-01-04 12:37:02 +08:00
Guo Xiang Tan
43671b1fda UX: Display group fullname in mention autocomplete. 2017-01-04 11:40:14 +08:00
Jeff Atwood
4e44845714 de-emphasize onebox URL field with color 2017-01-03 14:08:56 -08:00
Jeff Atwood
b58a6804c2 reduce font size on mobile prog expansion 2017-01-03 11:17:12 -08:00
Neil Lalonde
9c79bf1865 FIX: .bullet + .topic-header-extra pixel perfect vertical alignment 2017-01-03 14:00:14 -05:00
Robin Ward
1bf912f3ac FIX: Back button was not working in long topics with many deleted 2017-01-03 13:17:11 -05:00
Robin Ward
bee8425055 FIX: Don't reply as new topic when quoting a closed topic 2017-01-03 11:49:20 -05:00
Arpit Jalan
615fd2eb87 UX: sane max-height for onebox images 2017-01-03 21:06:49 +05:30
Guo Xiang Tan
a9a0e626db FIX: Group page tabs not displaying for normal users. 2017-01-03 17:56:13 +08:00
Guo Xiang Tan
ad4a96d387 FIX: Only send membership request to the last 5 active group owners. 2017-01-03 15:33:57 +08:00
Guo Xiang Tan
7ce4bc2e90 UX: Show spinning icon while group members load. 2017-01-03 14:58:14 +08:00
Guo Xiang Tan
3aed15c99e FIX: Group membership button now showing properly. 2017-01-03 14:36:56 +08:00
Guo Xiang Tan
761d524024 Merge pull request #4602 from tgxworld/fix_likes_being_quoted
FIX: Only quote `.cooked` text.
2017-01-03 14:02:21 +08:00
Guo Xiang Tan
1cf0401e26 Allow option to not include title on emoji images. 2017-01-03 11:07:55 +08:00
Guo Xiang Tan
ecb1078343 FIX: user-card-post-names outlet should be a div. 2017-01-03 10:39:41 +08:00
Guo Xiang Tan
40deef32e3 UX: Automatic width for fontawesome icons on groups page. 2017-01-03 10:07:59 +08:00
Jeff Atwood
bbb3217f6a add opacity to quote button 2017-01-02 14:17:09 -08:00
Régis Hanol
d8be3e8bb1 UX: ensure we only allow images when uploading an avatar, user card background, etc... 2017-01-02 11:37:56 +01:00