Guo Xiang Tan 4b0cf7f6dd SECURITY: XSS when displaying watched words in admin panel. ...

The XSS here is only possible if CSP is disabled. Low impact since CSP
is enabled by default in SiteSettings.

2019-07-15 10:55:50 +08:00

..

admin

SECURITY: XSS when displaying watched words in admin panel.

2019-07-15 10:55:50 +08:00

discourse

FIX: Do not show bootbox if post has no replies. (#7866)

2019-07-12 11:42:57 +02:00

discourse-common

Update theme component URL

2019-06-04 10:04:27 -04:00

docs

…

ember-addons

…

locales

FEATURE: Add Belarusian language

2019-07-04 11:37:37 +02:00

pretty-text

Follow-up for 9a11a8b3 to fix qunit tests

2019-07-11 23:56:22 +02:00

select-kit

True should be a string to display properly in aria-haspopup

2019-07-10 22:02:21 -04:00

wizard

Update UI for wizard themes further reading step (#7669)

2019-06-03 10:47:17 -04:00

activate-account.js.no-module.es6

…

admin.js.erb

…

application.js

SECURITY: updates lodash from 1.3.0 to 4.17.5 (#7546)

2019-05-16 10:34:19 +02:00

auto-redirect.js.no-module.es6

…

deprecated.js

…

discourse-loader.js

…

discourse-objects.js

…

discourse.js.es6

DEV: global s/this.get\("(\w+)"\)/this.$1 (#7592)

2019-05-27 10:15:39 +02:00

embed-application.js.no-module.es6

…

ember_include.js.erb

…

ember_jquery.js

…

ember-shim.js

…

env.js

…

google-tag-manager.js.no-module.es6

…

google-universal-analytics.js.no-module.es6

…

main_include_admin.js

…

markdown-it-bundle.js

FEATURE: Support [description|attachment](upload://<short-sha>) in MD take 2.

2019-05-29 09:26:32 +08:00

omniauth-complete.js.no-module.es6

…

onpopstate-handler.js.no-module.es6

…

plugin-third-party.js.erb

…

plugin.js.erb

…

polyfills.js

DEV: removes DOMTokenList polyfill (#7831)

2019-07-01 14:08:38 +02:00

preload-application-data.js.no-module.es6

…

preload-store.js.es6

…

pretty-text-bundle.js

FIX: Composer preview not caching inline onebox.

2019-06-11 09:14:53 +08:00

print-page.js

…

service-worker.js.erb

…

set-prototype-polyfill.js

…

template_include.js.erb

…

vendor.js

DEV: Remove HTML parser from Tautologistics. (#7344)

2019-04-10 11:21:22 +02:00

wizard-application.js

…

wizard-start.js.no-module.es6

…

wizard-vendor.js

…