discourse/app
Blake Erickson 3374457c44 SECURITY: Fix XSS in full name composer reply
We are using htmlSafe when rendering the name field so we need to escape
any html being passed in.
2023-03-16 16:25:48 -06:00
..
assets SECURITY: Fix XSS in full name composer reply 2023-03-16 16:25:48 -06:00
controllers SECURITY: Rate limit the creation of backups 2023-03-16 16:09:08 +01:00
helpers DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
jobs DEV: Fix threading error when running jobs immediately in system tests (#19811) 2023-01-10 13:41:25 +08:00
mailers DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
models FIX: avoid race condition when setting user status (#19817) (#20182) 2023-02-06 20:32:45 +04:00
serializers FIX: Preload user sidebar attrs when ?enable_sidebar=1 (#19843) 2023-01-25 13:48:49 +02:00
services FIX: Do not add empty use/svg tags in ExcerptParser (#19969) 2023-01-25 13:48:49 +02:00
views UX: add btn-primary class on email confirm page (#19803) 2023-01-09 15:26:56 -05:00