12 Commits

Author	SHA1	Message	Date
Sam	6b9b73236a	SECURITY: enforce hostname to match discourse hostname ... This ensures that the hostname rails uses for various helpers always matches the Discourse hostname # Conflicts: # config/application.rb # spec/requests/application_controller_spec.rb	2018-11-15 16:17:22 +11:00
Sam	879067d000	FIX: check admin theme cookie against user selectable ... previously admin got a free pass and could set theme via cookie to anything including themes that are not selectable this refactor ensures that only "preview" gets a free pass, all the rest goes through the same pipeline	2018-09-07 10:47:28 +10:00
Osama Sayegh	e0cc29d658	FEATURE: themes and components split ... * FEATURE: themes and components split * two seperate methods to switch theme type * use strict equality operator	2018-08-24 11:30:00 +10:00
Sam	ce4b12ae59	FIX: if we have not target available do not redirect	2018-08-20 13:10:59 +10:00
Misaka 0x4e21	d4fd19d49a	UX: Replace Google search with Discourse search on not found page ... * UX: Replace Google search with Discourse search on not found page. * FIX: Update application_controller_spec.rb.	2018-08-15 11:53:04 +10:00
Neil Lalonde	2c4d7225d8	FIX: permalink redirects with subfolder	2018-08-09 11:05:27 -04:00
Sam	ed4c0f256e	FIX: check permalinks for deleted topics ... - allow to specify 410 vs 404 in Discourse::NotFound exception - remove unused `permalink_redirect_or_not_found` which - handle JS side links to topics via Discourse-Xhr-Redirect mechanism	2018-08-09 15:05:12 +10:00
Osama Sayegh	0b7ed8ffaf	FEATURE: backend support for user-selectable components ... * FEATURE: backend support for user-selectable components * fix problems with previewing default theme * rename preview_key => preview_theme_id * omit default theme from child themes dropdown and try a different fix * cache & freeze stylesheets arrays	2018-08-08 14:46:34 +10:00
Sam	e72fd7ae4e	FIX: move crawler blocking into anon cache ... This refinement of previous fix moves the crawler blocking into anonymous cache This ensures we never poison the cache incorrectly when blocking crawlers	2018-07-04 11:14:43 +10:00
Sam	7f98ed69cd	FIX: move crawler blocking to app controller ... We need access to site settings in multisite, we do not have access yet if we attempt to get them in request tracker middleware	2018-07-04 10:30:50 +10:00
Neil Lalonde	3db1032bfd	FIX: not found page shouldn't include the Google search form for sites with login_required enabled	2018-05-23 16:59:02 -04:00
Vinoth Kannan	62edf3c401	Add spec test for authComplete param carry-forward	2018-03-27 18:04:40 +05:30