Sam 69bc8f526a SECURITY: only allow picking of avatars created by self (#6417) ...

* SECURITY: only allow picking of avatars created by self

Also adds origin tracking to all uploads including de-duplicated uploads

2018-12-18 13:57:49 +08:00

..

admin

SECURITY: remove admin memory diagnostics routes

2018-09-18 08:36:24 +10:00

users

FIX: store the topic links using the cooked upload url

2018-08-14 12:23:32 +02:00

about_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

application_controller.rb

FIX: remove slow platform detection from server side

2018-12-13 16:14:37 +11:00

badges_controller.rb

PERF: N+1 queries on badges page.

2018-03-19 14:36:09 +08:00

categories_controller.rb

REFACTOR: Rescue error at the specific spot that is raising the error.

2018-09-03 11:04:58 +08:00

category_hashtags_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

clicks_controller.rb

Make rubocop happy again.

2018-06-07 13:28:18 +08:00

composer_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

composer_messages_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

directory_items_controller.rb

make 🤖 rubocop happy

2018-05-16 16:35:04 +02:00

draft_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

drafts_controller.rb

Improvements to user drafts (#6226)

2018-08-02 07:41:27 +10:00

email_controller.rb

FIX: stop adding email to unsubscribe url

2018-05-22 09:07:03 +10:00

embed_controller.rb

FIX: store the topic links using the cooked upload url

2018-08-14 12:23:32 +02:00

exceptions_controller.rb

UX: Replace Google search with Discourse search on not found page

2018-08-15 11:53:04 +10:00

export_csv_controller.rb

Make rubocop happy again.

2018-06-07 13:28:18 +08:00

extra_locales_controller.rb

simplify production switch and serve extra locales from actual site

2018-01-10 08:19:51 +11:00

finish_installation_controller.rb

FEATURE: Make initial admins TL1

2018-08-22 15:45:24 +10:00

forums_controller.rb

PERF: add frozen strings

2018-01-15 12:44:54 +11:00

groups_controller.rb

FIX: Load more on groups page does not account for params.

2018-08-20 17:08:50 +08:00

highlight_js_controller.rb

Fix all the errors to get our tests green on Rails 5.1.

2017-09-25 13:48:58 +08:00

inline_onebox_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

invites_controller.rb

FIX: do not use scheduler for uploading csv file for invite

2018-07-04 13:28:11 +05:30

list_controller.rb

FIX: remove slow platform detection from server side

2018-12-13 16:14:37 +11:00

metadata_controller.rb

FEATURE: Use display: browser in webmanifest for iOS devices

2018-08-15 23:36:08 -03:00

notifications_controller.rb

Make rubocop happy again.

2018-06-07 13:28:18 +08:00

offline_controller.rb

FIX: offline controller regression

2017-10-31 15:44:50 +11:00

onebox_controller.rb

FIX: include title in local onebox when linking to a different topic

2018-02-19 22:40:14 +01:00

permalinks_controller.rb

FIX: if we have not target available do not redirect

2018-08-20 13:10:59 +10:00

post_action_users_controller.rb

UX: cap likes 2 (#5237)

2017-11-15 11:28:54 +11:00

post_actions_controller.rb

FIX: Properly display error when post action fails to create.

2018-06-20 21:20:23 +08:00

posts_controller.rb

FEATURE: Allow admins to reply without topic bump

2018-08-10 10:48:30 +10:00

push_notification_controller.rb

Feature: Push notifications for Android (#5792)

2018-05-04 15:31:48 -07:00

queued_posts_controller.rb

FIX: allow staff to remove tags from queued topics

2018-06-26 17:08:40 +05:30

qunit_controller.rb

DEV: remove qunit rails fork and add a couple of async tests

2018-04-23 16:42:40 +10:00

robots_txt_controller.rb

FIX: simplify so we ban all auth paths

2018-08-16 19:16:47 +10:00

safe_mode_controller.rb

Allow staff members to enable safe mode, even if disabled

2018-04-25 11:49:57 -04:00

search_controller.rb

FEATURE: support search click through tracking for user, category and tags

2017-12-01 12:04:55 +05:30

session_controller.rb

FEATURE: Second factor backup

2018-06-28 10:12:32 +02:00

similar_topics_controller.rb

display 'similar to' earlier when composing a post

2017-09-16 01:03:29 +02:00

site_controller.rb

FEATURE: adds header text/background color to site (#6462)

2018-11-01 21:29:04 +01:00

static_controller.rb

FIX: store the topic links using the cooked upload url

2018-08-14 12:23:32 +02:00

steps_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00

stylesheets_controller.rb

FEATURE: backend support for user-selectable components

2018-08-08 14:46:34 +10:00

tag_groups_controller.rb

Make rubocop happy again.

2018-06-07 13:28:18 +08:00

tags_controller.rb

FIX: remove slow platform detection from server side

2018-12-13 16:14:37 +11:00

themes_controller.rb

fix theme previewing (#6245)

2018-08-08 10:58:45 +03:00

topics_controller.rb

FIX: remove slow platform detection from server side

2018-12-13 16:14:37 +11:00

uploads_controller.rb

FIX: Upload's content is the only source of truth for the file type.

2018-08-07 13:15:00 +08:00

user_actions_controller.rb

FIX: Remove mentions filters from user and groups

2017-12-07 16:29:02 -05:00

user_api_keys_controller.rb

UX: bumps the user-api-key version to 3 (#6526)

2018-11-01 21:29:29 +01:00

user_avatars_controller.rb

FIX: set old last modified date for invalid avatars

2018-08-31 17:07:31 +10:00

user_badges_controller.rb

FIX: store the topic links using the cooked upload url

2018-08-14 12:23:32 +02:00

users_controller.rb

SECURITY: only allow picking of avatars created by self (#6417)

2018-12-18 13:57:49 +08:00

users_email_controller.rb

FEATURE: Second factor backup

2018-06-28 10:12:32 +02:00

webhooks_controller.rb

Make rubocop happy again.

2018-06-07 13:28:18 +08:00

wizard_controller.rb

Refactor requires login logic, reduce duplicate code

2018-02-01 15:17:59 +11:00