Commit Graph

21 Commits

Author SHA1 Message Date
David Taylor
ba5b035f6e
FEATURE: Increase pbkdf2 iterations to 600k (#20981)
Existing passwords will continue to work. Hashes will be regenerates on a user's next login.
2023-04-11 11:56:20 +01:00
Joshua Rosenfeld
a29b133d33
DEV: Update security policy (#16144)
Add note regarding low quality reports being received via email.
2022-03-09 10:02:20 +08:00
Michael Brown
5f7e60d9dc discourse/discourse change from 'master' to 'main' 2021-07-19 11:46:15 -04:00
Josh Soref
59097b207f
DEV: Correct typos and spelling mistakes (#12812)
Over the years we accrued many spelling mistakes in the code base. 

This PR attempts to fix spelling mistakes and typos in all areas of the code that are extremely safe to change 

- comments
- test descriptions
- other low risk areas
2021-05-21 11:43:47 +10:00
Rishabh
8517b6f386
DOCS: we use xss.js and not Google Caja (#12866)
The text is out of date as we migrated to xss.js quite some time ago.
2021-04-28 15:02:55 +05:30
Krzysztof Kotlarek
e0d9232259
FIX: use allowlist and blocklist terminology (#10209)
This is a PR of the renaming whitelist to allowlist and blacklist to the blocklist.
2020-07-27 10:23:54 +10:00
Jeff Atwood
db39eae683
make security commits search order by date 2019-07-25 00:08:03 -07:00
sau226
24b3494660 HTTPSify links (#7046) 2019-02-22 16:29:27 +01:00
Jeff Atwood
bd6d482d11
Update SECURITY.md 2018-12-19 16:55:54 -08:00
Jeff Atwood
358fbeba14
add CSP info for Discourse 2.2 2018-12-19 16:54:45 -08:00
Jeff Atwood
02f582eca0
add recent security commits info 2018-09-11 12:43:52 -07:00
Jeff Atwood
ea1f4a0021 add Hacker One page to security.md 2017-01-06 23:51:12 -08:00
Jeff Atwood
20ba6e4b19 add ddos section, install guide references 2014-05-09 16:36:39 -07:00
Arpit Jalan
03e51b1a3a Update install guide link 2014-04-25 20:22:36 +05:30
Stephan Kaag
a6b4b5dbf2 Replace Clockwork with Sidetiq 2013-08-14 21:39:40 +02:00
Jeff Atwood
028cd348e1 more security doc copyedits 2013-07-30 14:08:15 -07:00
Jeff Atwood
4c8a3370da copyedits 2013-07-30 14:00:37 -07:00
Jeff Atwood
d688ef1b49 move security reporting up to the top 2013-07-30 13:59:30 -07:00
Jeff Atwood
c3f3c1a23f cross-links and copyedits 2013-07-30 13:57:15 -07:00
Sam
0e494c7303 Update SECURITY.md 2013-07-29 16:42:49 +10:00
Sam
3186535537 initial draft of security document 2013-07-29 16:26:49 +10:00