Commit Graph

14764 Commits

Author SHA1 Message Date
Neil Lalonde
a4c7f55a48 Version bump to v1.3.5 2015-09-09 11:38:13 -04:00
Sam
7bf12891f7 SECURITY: fix possible XSS expanding quotes 2015-09-08 15:27:48 +10:00
Neil Lalonde
30e2b579c1 Version bump to v1.3.4 2015-07-30 15:45:05 -04:00
Robin Ward
a716f9857b SECURITY: Make sure export CSV is generated via a POST 2015-07-24 12:38:58 -04:00
Neil Lalonde
e180e55c4e Version bump to v1.3.3 2015-07-17 11:21:48 -04:00
Sam
f8ba5346c4 SECURITY: Remove email validation check bypass
- Increase size of email column to varchar(513)
 - Give error message on signup when email is too large

Overall impact: Low, allows signups from blocked domains. Main risk is increased spam.
2015-07-14 09:46:00 +10:00
Neil Lalonde
bffaf5a117 Version bump to v1.3.2 2015-06-11 15:57:56 -04:00
Robin Ward
c2dde1ae88 PERF: Debounce mention lookup, enforce minimum username 2015-06-11 15:15:54 -04:00
Arpit Jalan
0083697dff FIX: fix category badge and link in email digest 2015-06-11 13:22:52 -04:00
Sam Saffron
32b17c628a SECURITY: Query @usernames in bulk
Otherwise you could add many requests at once while composing.
2015-06-11 13:12:01 -04:00
Sam Saffron
098b292c0f PERF: production assets not minified
source url post processor forcing all scripts into an eval,
  minifier can not minify such files
2015-06-11 10:06:11 -04:00
Sam Saffron
62e260c69c FEATURE: improve no-js topic list information
- Provide links to pages
- Provied link to last topic
2015-06-10 16:41:45 -04:00
Sam Saffron
51f9e3fc45 Attempt micro data using old vocubulary
Seeing weird results on Google
2015-06-10 16:41:39 -04:00
Arpit Jalan
0393aa63d4 FIX: when sending private message emails do not check email_direct setting 2015-06-10 16:41:33 -04:00
Robin Ward
ccaf525e8d FIX: Bad page title for categories view by google crawler 2015-06-10 16:41:27 -04:00
Arpit Jalan
ce0830b23f FIX: send 404 error when unauthorized user tries to download user archive 2015-06-10 16:41:23 -04:00
Régis Hanol
03fcf99039 FIX: missing emoji autocomplete 2015-06-10 16:40:39 -04:00
Régis Hanol
28d219dfed new 'uploads:migrate_to_new_pattern' task 2015-06-10 16:39:07 -04:00
Robin Ward
7302f6b60b Simple "cook" for email imports from mailing lists 2015-06-10 16:39:01 -04:00
cpradio
2c05e447c3 FEATURE: Use created_at to remove an ip if its last_match_at is null 2015-06-10 16:38:53 -04:00
Sam Saffron
e5d2b49119 correct specs 2015-06-10 16:38:47 -04:00
Sam Saffron
2c883833eb FEATURE: we need admin login always 2015-06-10 16:38:42 -04:00
Arpit Jalan
10c44763aa FIX: staff should be immune to max_invites_per_day setting 2015-06-10 16:38:37 -04:00
Neil Lalonde
f2353fa430 FEATURE: plugins can register a custom admin quick start topic that will be seeded into new sites 2015-06-10 16:38:22 -04:00
Régis Hanol
38090b0b94 we don't care about convert output/errors 2015-06-10 16:38:18 -04:00
Sam Saffron
7f35538bfc update memory profiler, oj and lru redux 2015-06-10 16:38:12 -04:00
Jeff Atwood
28c261238e lighter quote controls 2015-06-10 16:37:58 -04:00
Jeff Atwood
3a78783574 fix minor alignment issues with expanded posts 2015-06-10 16:37:52 -04:00
Sam Saffron
59ab3a7b2b SECURITY: expire all existing email tokens on password reset 2015-06-05 14:15:41 -04:00
Sam Saffron
3151192626 SECURITY: expire all existing sessions if user changes passwords 2015-06-05 13:18:59 -04:00
Robin Ward
ec88c08f24 Never enqueue posts from staff 2015-06-05 12:35:45 -04:00
Neil Lalonde
85b4e5fb0d Version bump to v1.3.1 (skip 1.3.0) 2015-06-03 17:03:29 -04:00
Neil Lalonde
4b0f33cc80 Version bump to v1.3.0 2015-06-03 16:52:09 -04:00
Neil Lalonde
8fec29ab32 Merge master 2015-06-03 16:51:28 -04:00
Régis Hanol
db84f30465 Merge pull request #3524 from techAPJ/patch-1
UX: prevent horizontal scroll on iPhone
2015-06-03 19:27:27 +02:00
Régis Hanol
c9a341417c Merge pull request #3527 from techAPJ/patch-3
FEATURE: include email_prefix in digest email subject instead of site title
2015-06-03 19:27:08 +02:00
Régis Hanol
bd33cd3ffb Merge pull request #3525 from techAPJ/patch-2
UX: post content was moving up when viewing replies
2015-06-03 19:26:58 +02:00
Arpit Jalan
5180d3e355 FEATURE: include email_prefix in digest email subject instead of site title 2015-06-03 22:22:29 +05:30
Neil Lalonde
f18140b81f FIX: digest emails weren't using user's last emailed and last seen times 2015-06-03 12:16:39 -04:00
Neil Lalonde
ec6b21227e slightly better alignment for bullet category badge 2015-06-03 11:35:15 -04:00
Robin Ward
2a0084ff87 Improve code formatting 2015-06-03 11:34:30 -04:00
Régis Hanol
4029aa3dfc Merge pull request #3526 from techAPJ/update-translations
Update Translations
2015-06-03 17:32:09 +02:00
Arpit Jalan
45a7c314c2 Update Translations 2015-06-03 20:39:08 +05:30
Arpit Jalan
4c14d981d7 UX: post content was moving up when viewing replies 2015-06-03 20:24:41 +05:30
Régis Hanol
7afe78eec0 FIX: don't use a table for poll results 2015-06-03 16:49:20 +02:00
Arpit Jalan
52125228af UX: prevent horizontal scroll on iPhone 2015-06-03 19:43:50 +05:30
Régis Hanol
74b121beeb Merge pull request #3518 from techAPJ/patch-3
FIX: do not block registration for whitelisted IP address
2015-06-03 12:37:50 +02:00
Régis Hanol
ef3e735fb5 Merge pull request #3523 from techAPJ/patch-2
Remove site setting stubbing (Round 1)
2015-06-03 12:37:27 +02:00
Régis Hanol
50a39f7e98 use bigger bottom padding instead of line-height to vertical center 2015-06-03 12:35:49 +02:00
Régis Hanol
0013a94692 FIX: use pastel color for background of the selected poll options 2015-06-03 12:28:03 +02:00