Commit Graph

18649 Commits

Author SHA1 Message Date
Robin Ward
80834df757 SECURITY: SQL Injection in Admin List Active Users 2016-07-28 15:29:16 -04:00
Robin Ward
90a3cc7f18 SECURITY: XSS in "Account Suspended" Messages and Badge Descriptions 2016-07-28 15:29:05 -04:00
Sam
f319923753 SECURITY: limit route access when using external avatars 2016-07-28 09:04:32 +10:00
Neil Lalonde
c8081af728 Version bump to v1.5.4 2016-07-26 11:47:38 -04:00
Guo Xiang Tan
cd5842d38b SECURITY: Possible SQL injection. 2016-07-19 13:03:00 +08:00
Neil Lalonde
ba3f7936a8 Version bump to v1.5.3 2016-06-21 11:44:32 -04:00
Sam
40a4aa4313 SECURITY: update logster 2016-06-20 12:15:54 +10:00
Sam
2b81c593f5 SECURITY: restrict constantize classes in search controller 2016-06-17 13:48:15 +10:00
Robin Ward
1e241dedad SECURITY: Unapproved, active users should not receive emails 2016-06-16 13:09:47 -04:00
Neil Lalonde
77d9467818 Version bump to v1.5.2 2016-05-19 12:23:46 -04:00
Sam
416e78796b SECURITY: update rack-mini-profiler 2016-05-18 18:34:02 +10:00
Régis Hanol
6dfd8ed47e SECURITY: 2 XSSs in post gutter and local oneboxes 2016-05-14 00:09:11 +02:00
Neil Lalonde
47e932159e Version bump to v1.5.1 2016-04-07 14:07:44 -04:00
Neil Lalonde
dc71f6b9d9 Update Translations 2016-04-07 13:51:31 -04:00
Neil Lalonde
01b6bc08ba Merge fixes from master 2016-04-07 13:51:05 -04:00
Régis Hanol
a5d8dfb07e FIX: don't hardcode maximum file size 2016-04-06 22:51:28 +02:00
Régis Hanol
42da8a9246 match is old school (cc @EvilTrout) 2016-04-06 21:57:54 +02:00
Régis Hanol
fe000cd9c2 FIX: <details> should expand when supported by the browser 2016-04-06 21:44:29 +02:00
Robin Ward
8e50f0de6a FIX: Support editing translation keys with uppercase characters 2016-04-06 15:26:18 -04:00
frictionel
9410c2b986 correcting errors in translation sources
* Update client.en.yml
2016-04-06 21:08:47 +02:00
Régis Hanol
2c508f205a FEATURE: properly set 'In-Reply-To' header when sending an email that is a reply to an incoming email 2016-04-06 21:05:10 +02:00
Erick Guan
e09634dbae Add plugin outlets for user stream item and topic list item 2016-04-06 15:03:49 -04:00
Steven Slade
0deea4f7d4 add ability to have post-menu in second position 2016-04-06 14:05:52 -04:00
Robin Ward
5866f0df18 Remove UserFirst for mention since it can be retrieved elsewhere 2016-04-06 14:01:37 -04:00
Steven Slade
b1d04412db altering topic-map widget's like count to show total topic like count
* altering topic-map widget's like count to display total topic like count rather than the first post's like count

* changing likeCount to topicLikeCount for virtual dom element to show total likes of thread
2016-04-06 12:49:27 -04:00
Régis Hanol
2b9e8e5a7d Merge pull request #4147 from cpradio/default_top_timeframe
FIX: Use default top setting when user is return or enough data exists for Top Page Results
2016-04-06 18:33:56 +02:00
Robin Ward
189d70661e FIX: Don't count emojis within quotes 2016-04-06 12:02:35 -04:00
Régis Hanol
56c870cca2 add support for 1.5 pixel ratio 2016-04-06 10:57:59 +02:00
Arpit Jalan
9a045c216c FIX: verify that sso_url setting includes protocol 2016-04-06 11:12:47 +05:30
Sam
4f10b5e940 avoid exception for general case 2016-04-06 13:18:11 +10:00
Arpit Jalan
bc97e09dde Merge pull request #4144 from oppegard/patch-1
Update DEVELOPMENT-OSX-NATIVE.md
2016-04-06 08:07:38 +05:30
Glenn Oppegard
342784e497 Update DEVELOPMENT-OSX-NATIVE.md 2016-04-05 19:44:53 -06:00
Glenn Oppegard
1f4b3faf9b Update DEVELOPMENT-OSX-NATIVE.md 2016-04-05 19:38:53 -06:00
Robin Ward
ba80ae73be FIX: Broken spec 2016-04-05 16:39:20 -04:00
Robin Ward
64a1a44c4b FIX: Don't create user first records on private posts 2016-04-05 16:13:10 -04:00
Robin Ward
50fbda1ab7 FIX: Not sure why the default group didn't work 2016-04-05 15:37:41 -04:00
Robin Ward
c30d327b77 FEATURE: Two new badges - First Emoji and First Mention 2016-04-05 15:17:41 -04:00
Neil Lalonde
56e47c8d7e FEATURE: report on admin dashboard when favicon is failing to load 2016-04-05 14:42:32 -04:00
cpradio
c5bb1d1cfe Return default top setting as part of best_periods_for to see if it can be used 2016-04-05 14:27:18 -04:00
Régis Hanol
d402a45781 FIX: hitting '/t/:id/posts.json' should return the first page of posts 2016-04-05 19:12:14 +02:00
Guo Xiang Tan
a1add415e5 UX: Quote button covered by youtube info header on mobile. 2016-04-05 16:18:07 +08:00
Arpit Jalan
b3c73847a5 Merge pull request #4140 from oblakeerickson/osx-readme
improve os x instructions
2016-04-05 13:00:27 +05:30
Arpit Jalan
d9371ae631 UX: 'login to reply' button should match 'reply to topic' button 2016-04-05 12:56:27 +05:30
Jeff Atwood
0463187772 darken the gold a bit 2016-04-05 00:05:38 -07:00
Jeff Atwood
b7be56cfd1 read only mode buttons can be smaller 2016-04-04 23:41:26 -07:00
Régis Hanol
f382897952 FIX: don't extract link with 'mailto' scheme 2016-04-05 00:43:11 +02:00
Régis Hanol
b00ea5dc92 fix Group.ensure_consistency! 2016-04-04 23:41:49 +02:00
Neil Lalonde
7899c2d86e Merge pull request #4138 from NickIvanter/internal-links-issue
FIX: internal links in subfolder installs
2016-04-04 15:14:47 -04:00
Régis Hanol
841f36b058 FIX: automatically unstage user when signing in using OAuth 2016-04-04 19:04:10 +02:00
Régis Hanol
332a1ea87e FIX: add support for 'space' in backup's filename 2016-04-04 17:24:02 +02:00