github-mirror/discourse
github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-22 07:24:26 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
discourse/spec/requests
History
Alan Guo Xiang Tan 42d2cb2d4e
SECURITY: Hide PM count for tags by default (#20061) (#20090) 
Currently `Topic#pm_topic_count` is a count of all personal messages tagged for a given tag. As a result, any user with access to PM tags can poll a sensitive tag to determine if a new personal message has been created using that tag even if the user does not have access to the personal message. We classify this as a minor leak in sensitive information.

With this commit, `Topic#pm_topic_count` is hidden from users by default unless the `display_personal_messages_tag_counts` site setting is enabled.
2023-02-01 06:43:58 +08:00
..
admin
FIX: skip email if blank while syncing SSO attributes. (#19939)
2023-01-25 13:48:49 +02:00
api
DEV: Document group param for search endpoint (#19806)
2023-01-09 14:46:07 -07:00
about_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
application_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
associate_accounts_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
badges_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
bookmarks_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
bootstrap_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
categories_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
clicks_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
composer_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
composer_messages_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
csp_reports_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
directory_columns_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
directory_items_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
do_not_disturb_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
drafts_controller_spec.rb
SECURITY: Limit the length of drafts
2023-01-25 13:52:58 +02:00
email_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
embed_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
exceptions_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
export_csv_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
extra_locales_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
finish_installation_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
forums_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
groups_controller_spec.rb
SECURITY: Limit the character count of group membership requests
2023-01-25 13:53:07 +02:00
hashtags_controller_spec.rb
FIX: Fix incorrect hashtag setting migration (#19857)
2023-01-25 13:48:49 +02:00
inline_onebox_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
invites_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
list_controller_spec.rb
FIX: Validate tags parameter of TopicQuery (#19830)
2023-01-25 13:48:49 +02:00
metadata_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
notifications_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
offline_controller_spec.rb
Add RSpec 4 compatibility (#17652)
2022-07-28 10:27:38 +08:00
omniauth_callbacks_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
onebox_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
permalinks_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
post_action_users_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
post_actions_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
post_readers_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
posts_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
presence_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
published_pages_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
push_notification_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
qunit_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
reviewable_claimed_topics_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
reviewables_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
robots_txt_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
safe_mode_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
search_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
session_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
similar_topics_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
site_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
sitemap_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
static_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
steps_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
stylesheets_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
svg_sprite_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
tag_groups_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
tags_controller_spec.rb
SECURITY: Hide PM count for tags by default (#20061) (#20090)
2023-02-01 06:43:58 +08:00
theme_javascripts_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
topics_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
uploads_controller_multisite_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
uploads_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
user_actions_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
user_api_keys_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
user_avatars_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
user_badges_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
user_status_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
users_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
users_email_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
webhooks_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00
wizard_controller_spec.rb
DEV: Apply syntax_tree formatting to spec/*
2023-01-09 11:49:28 +00:00