David Taylor 982f23e1f2

SECURITY: Remove ember-cli specific response from application routes (stable) (#15154) ...

Under some conditions, these varied responses could lead to cache poisoning, hence the 'security' label.

For the stable branch, we are disabling the use of Ember CLI against production sites. A new implementation has been added to the tests-passed/beta branches

2021-12-01 16:02:45 +00:00

..

assets

SECURITY: Strip unrendered unicode bidirectional chars in code blocks (#15032)

2021-11-22 10:46:07 +10:00

controllers

FIX: Make autotag watched words case insensitive (#13043)

2021-05-14 16:52:10 +03:00

helpers

SECURITY: Remove ember-cli specific response from application routes (stable) (#15154)

2021-12-01 16:02:45 +00:00

jobs

SECURITY: Improve validation of SNS subscription confirm (#14672)

2021-10-20 22:20:35 +01:00

mailers

FEATURE: Auto-activate users invited by email (#12675)

2021-04-14 12:15:56 +03:00

models

SECURITY: Only show tags to users with permission (#15148)

2021-12-01 10:33:10 +08:00

serializers

SECURITY: XSS in bookmarks list (#13311)

2021-06-07 16:59:12 +02:00

services

SECURITY: Only show tags to users with permission (#15148)

2021-12-01 10:33:10 +08:00

views

DEV: Minor changes to /theme-qunit landing page (#13032)

2021-05-11 10:45:07 -04:00