2 Commits

Author	SHA1	Message	Date
Guo Xiang Tan	1590387bd1	SECURITY: Users can pick non-avatar uploads. ... https://meta.discourse.org/t/bug-report-idor-on-avatar-pick-function-discussions-udacity-com/103564	2018-12-18 13:57:54 +08:00
Sam	69bc8f526a	SECURITY: only allow picking of avatars created by self (#6417) ... * SECURITY: only allow picking of avatars created by self Also adds origin tracking to all uploads including de-duplicated uploads	2018-12-18 13:57:49 +08:00