discourse/spec
Martin Brennan 4646a38ae6
FIX: Use presigned URL to avoid 403 when pulling hotlinked images for secure media (#8764)
When we were pulling hotlinked images for oneboxes in the CookedPostProcessor, we were using the direct S3 URL, which returned a 403 error and thus did not set widths and heights of the images. We now cook the URL first based on whether the upload is secure before handing off to FastImage.
2020-01-23 09:31:46 +10:00
..
components FIX: Use presigned URL to avoid 403 when pulling hotlinked images for secure media (#8764) 2020-01-23 09:31:46 +10:00
fabricators FEATURE: Secure media allowing duplicated uploads with category-level privacy and post-based access rules (#8664) 2020-01-16 13:50:27 +10:00
fixtures REFACTOR: Restoring of backups and migration of uploads to S3 2020-01-14 11:41:35 +01:00
helpers FIX: parallel spec system needs a dedicated upload folder for each worker. (#8547) 2019-12-18 11:21:57 +05:30
import_export DEV: clean up dependencies in spec 2019-10-02 14:50:54 +10:00
integration UX: Include public groups in mentionable groups set (#8516) 2019-12-12 13:13:40 +02:00
integrity DEV: Update markdown-it from 8.4.1 to 10.0.0 (#8164) 2019-10-08 13:00:22 +02:00
jobs FEATURE: Export all types of reports (#8748) 2020-01-21 18:43:19 +02:00
lib FIX: Change additional public uploads to not be secure (#8738) 2020-01-17 13:16:27 +10:00
mailers DEV: s/\$redis/Discourse\.redis (#8431) 2019-12-03 10:05:53 +01:00
models FIX: when tag or category is added notify users that topic was modified (#8750) 2020-01-21 08:41:13 +11:00
multisite FIX: parallel spec system needs a dedicated upload folder for each worker. (#8547) 2019-12-18 11:21:57 +05:30
requests FIX: Use new tag routes (#8683) 2020-01-21 19:23:08 +02:00
serializers FEATURE: Secure media allowing duplicated uploads with category-level privacy and post-based access rules (#8664) 2020-01-16 13:50:27 +10:00
services FIX: Notify staged users about private categories (#8765) 2020-01-22 16:33:25 -03:00
support SECURITY: Improve second factor auth logic 2020-01-10 10:45:56 +10:00
tasks DEV: s/\$redis/Discourse\.redis (#8431) 2019-12-03 10:05:53 +01:00
views/omniauth_callbacks FEATURE: Use full page redirection for all external auth methods (#8092) 2019-10-08 12:10:43 +01:00
rails_helper.rb SECURITY: 2FA with U2F / TOTP 2020-01-15 11:27:12 +01:00