Martin Brennan 3c5fb871c0 SECURITY: Filter unread bookmark reminders the user cannot see ... There is an edge case where the following occurs: 1. The user sets a bookmark reminder on a post/topic 2. The post/topic is changed to a PM before or after the reminder fires, and the notification remains unread by the user 3. The user opens their bookmark reminder notification list and they can still see the notification even though they cannot access the topic anymore There is a very low chance for information leaking here, since the only thing that could be exposed is the topic title if it changes to something sensitive. This commit filters the bookmark unread notifications by using the bookmarkable can_see? methods and also prevents sending reminder notifications for bookmarks the user can no longer see.		2023-11-09 13:39:16 +11:00
..
chat	SECURITY: Filter unread bookmark reminders the user cannot see	2023-11-09 13:39:16 +11:00
discourse_dev	DEV: Migrate Chat::MessageCreator to a service (#22390)	2023-09-07 08:57:29 +02:00
email_controller_helper
onebox/templates	FiX: Update date url for thread oneboxes (#24172)	2023-10-31 08:04:40 -03:00
tasks	DEV: Reintroduce chat rake dev generate tasks (#21164)	2023-04-20 10:53:10 +10:00
service_runner.rb	DEV: Add policy objects to services	2023-05-25 12:34:00 +02:00