Robin Ward 20a8a2f396 SECURITY: Ensure the invite JSON API matches the UX ...

Anonymous users could query the invite json and see counts and
summaries which is not allowed in the UX of Discourse.

This commit has those endpoints return a 403 unless the user is
allowed to invite.

2020-03-05 09:55:45 -05:00

..

assets

FIX: allows to select the action when agreeing with penalty (#9099)

2020-03-04 10:32:20 -05:00

controllers

SECURITY: Ensure the invite JSON API matches the UX

2020-03-05 09:55:45 -05:00

helpers

FIX: blank popular posts in summary emails due to lightbox images

2020-02-21 16:18:38 -05:00

jobs

FEATURE: limit number of notifications per user to 10,000

2020-02-24 11:42:50 +11:00

mailers

FIX: Replace deprecated URI.encode, URI.escape, URI.unescape and URI.unencode (#8528)

2019-12-12 12:49:21 +10:00

models

FEATURE: limit number of notifications per user to 10,000

2020-02-24 11:42:50 +11:00

serializers

FIX: tag info misleading message saying it's not restricted

2020-02-05 15:23:39 -05:00

services

FIX: ensures destroying a user with security keys doesn't fail (#9042)

2020-02-25 14:07:57 -05:00

views

FIX: Sync Ember and non-Ember layouts (#9028)

2020-02-25 15:31:04 +02:00