Krzysztof Kotlarek 24cca10da7 SECURITY: SSRF vulnerability in TopicEmbed ...

Block redirects when making the final request in TopicEmbed to prevent Server Side Request Forgery (SSRF)

2023-11-09 13:47:21 +11:00

..

assets

SECURITY: Correctly escape 'text' email preview (stable)

2023-10-16 10:51:26 -04:00

controllers

SECURITY: Prevent arbitrary topic custom fields from being set

2023-10-16 10:51:28 -04:00

helpers

DEV: Correctly strip sourcemap URL from splash-screen js (#22879)

2023-07-31 16:49:27 +01:00

jobs

FIX: Missing pending queued posts from topic view (#22838)

2023-07-28 16:16:23 +00:00

mailers

FIX: Order tags shown in email subject by topics count and name (#22586)

2023-07-13 15:39:58 +08:00

models

SECURITY: SSRF vulnerability in TopicEmbed

2023-11-09 13:47:21 +11:00

serializers

DEV: Remove unread_private_messages and deprecation (#22893)

2023-08-01 14:44:39 +10:00

services

FIX: Seed all categories and tags configured as defaults for nav menu (#22793)

2023-07-27 10:52:33 +08:00

views

SECURITY: Hide restricted tags in noscript view

2023-07-28 12:53:50 +01:00