Commit Graph

8615 Commits

Author SHA1 Message Date
Sam
7bf12891f7 SECURITY: fix possible XSS expanding quotes 2015-09-08 15:27:48 +10:00
Robin Ward
a716f9857b SECURITY: Make sure export CSV is generated via a POST 2015-07-24 12:38:58 -04:00
Sam
f8ba5346c4 SECURITY: Remove email validation check bypass
- Increase size of email column to varchar(513)
 - Give error message on signup when email is too large

Overall impact: Low, allows signups from blocked domains. Main risk is increased spam.
2015-07-14 09:46:00 +10:00
Robin Ward
c2dde1ae88 PERF: Debounce mention lookup, enforce minimum username 2015-06-11 15:15:54 -04:00
Arpit Jalan
0083697dff FIX: fix category badge and link in email digest 2015-06-11 13:22:52 -04:00
Sam Saffron
32b17c628a SECURITY: Query @usernames in bulk
Otherwise you could add many requests at once while composing.
2015-06-11 13:12:01 -04:00
Sam Saffron
62e260c69c FEATURE: improve no-js topic list information
- Provide links to pages
- Provied link to last topic
2015-06-10 16:41:45 -04:00
Sam Saffron
51f9e3fc45 Attempt micro data using old vocubulary
Seeing weird results on Google
2015-06-10 16:41:39 -04:00
Arpit Jalan
0393aa63d4 FIX: when sending private message emails do not check email_direct setting 2015-06-10 16:41:33 -04:00
Robin Ward
ccaf525e8d FIX: Bad page title for categories view by google crawler 2015-06-10 16:41:27 -04:00
Arpit Jalan
ce0830b23f FIX: send 404 error when unauthorized user tries to download user archive 2015-06-10 16:41:23 -04:00
Régis Hanol
03fcf99039 FIX: missing emoji autocomplete 2015-06-10 16:40:39 -04:00
Robin Ward
7302f6b60b Simple "cook" for email imports from mailing lists 2015-06-10 16:39:01 -04:00
cpradio
2c05e447c3 FEATURE: Use created_at to remove an ip if its last_match_at is null 2015-06-10 16:38:53 -04:00
Sam Saffron
2c883833eb FEATURE: we need admin login always 2015-06-10 16:38:42 -04:00
Régis Hanol
38090b0b94 we don't care about convert output/errors 2015-06-10 16:38:18 -04:00
Jeff Atwood
28c261238e lighter quote controls 2015-06-10 16:37:58 -04:00
Jeff Atwood
3a78783574 fix minor alignment issues with expanded posts 2015-06-10 16:37:52 -04:00
Sam Saffron
59ab3a7b2b SECURITY: expire all existing email tokens on password reset 2015-06-05 14:15:41 -04:00
Sam Saffron
3151192626 SECURITY: expire all existing sessions if user changes passwords 2015-06-05 13:18:59 -04:00
Neil Lalonde
8fec29ab32 Merge master 2015-06-03 16:51:28 -04:00
Régis Hanol
db84f30465 Merge pull request #3524 from techAPJ/patch-1
UX: prevent horizontal scroll on iPhone
2015-06-03 19:27:27 +02:00
Régis Hanol
c9a341417c Merge pull request #3527 from techAPJ/patch-3
FEATURE: include email_prefix in digest email subject instead of site title
2015-06-03 19:27:08 +02:00
Régis Hanol
bd33cd3ffb Merge pull request #3525 from techAPJ/patch-2
UX: post content was moving up when viewing replies
2015-06-03 19:26:58 +02:00
Arpit Jalan
5180d3e355 FEATURE: include email_prefix in digest email subject instead of site title 2015-06-03 22:22:29 +05:30
Neil Lalonde
f18140b81f FIX: digest emails weren't using user's last emailed and last seen times 2015-06-03 12:16:39 -04:00
Neil Lalonde
ec6b21227e slightly better alignment for bullet category badge 2015-06-03 11:35:15 -04:00
Robin Ward
2a0084ff87 Improve code formatting 2015-06-03 11:34:30 -04:00
Arpit Jalan
4c14d981d7 UX: post content was moving up when viewing replies 2015-06-03 20:24:41 +05:30
Arpit Jalan
52125228af UX: prevent horizontal scroll on iPhone 2015-06-03 19:43:50 +05:30
Jeff Atwood
9df9cd2c66 for some reason we don't clear h1,2,3 margins on mobile.. 2015-06-03 03:15:34 -07:00
Jeff Atwood
538f0d1199 fix mobile styles around topic map 2015-06-03 02:46:41 -07:00
Sam
11619247b4 Merge pull request #3522 from techAPJ/patch-2
FIX: move old drafts cleanup to the dedicated method and add test
2015-06-03 19:12:58 +10:00
Sam Saffron
56b4826b9f FEATURE: plugin filter for topic categories breadcrumb 2015-06-03 19:06:55 +10:00
Arpit Jalan
725861f344 FIX: move draft cleanup to the dedicated method and add test 2015-06-03 14:35:54 +05:30
Sam Saffron
89b475e538 FEATURE: clean up microdata breadcrumb
* do not include any breadcrumb for uncategorized
* do not include the work "Categories" as a breadcrumb
2015-06-03 18:17:45 +10:00
Arpit Jalan
acf6c27c65 UX: show category badge underneath title in user stream 2015-06-03 12:35:11 +05:30
Robin Ward
34acb805a4 FIX: When navigating back to the user's profile page items were missing 2015-06-02 21:30:36 -04:00
Robin Ward
42f2cd83db Run cleanDOM even when swapping out models 2015-06-02 21:13:11 -04:00
Jeff Atwood
1c0610427d UX: remove dark background on expanded replies 2015-06-02 14:42:34 -07:00
Robin Ward
92cddfa598 Basic support for server side plugin outlets 2015-06-02 14:28:12 -04:00
Robin Ward
f3ff435a62 FIX: Incorrect logo showing up on home page after focus 2015-06-02 12:36:23 -04:00
Robin Ward
f28719fd85 FIX: Incorrect capitalization. No idea how it didn't fail! 2015-06-02 12:02:48 -04:00
Régis Hanol
9d4c53c882 FIX: custom emoji autocomplete 2015-06-02 17:48:19 +02:00
Neil Lalonde
8449896f3d more bullet category vertical alignment fussing 2015-06-02 10:50:33 -04:00
Jeff Atwood
fa963e8f38 Revert "Revert "FIX: new task to delete old drafts weekly""
This reverts commit c987a1d571.
2015-06-02 04:26:01 -07:00
Sam Saffron
c987a1d571 Revert "FIX: new task to delete old drafts weekly"
This reverts commit fcaed7a00d.
2015-06-02 20:30:06 +10:00
Sam Saffron
0fd1974838 FIX: leaving around useless drafts after posting 2015-06-02 20:28:33 +10:00
Sam Saffron
d459cb95dc FIX: when advancing draft sequence remove old drafts 2015-06-02 20:28:33 +10:00
Jeff Atwood
afafa30989 Merge pull request #3514 from techAPJ/patch-1
FIX: new task to delete old drafts weekly
2015-06-01 20:21:05 -07:00