Jarek Radosz 65017fe920

SECURITY: moderator shouldn't be able to import a theme via API (stable) (#18420) ...

* SECURITY: moderator shouldn't be able to import a theme via API.
* DEV: apply `AdminConstraint` for all the "themes" routes.

Co-authored-by: Vinoth Kannan <svkn.87@gmail.com>

2022-09-29 20:13:34 +02:00

..

admin_controller.rb

DEV: add a few frozen string literals

2019-05-02 16:57:12 +10:00

api_controller.rb

FEATURE: Add pagination to API keys page (#14777)

2021-11-09 12:18:23 +02:00

backups_controller.rb

FEATURE: Local chunked uppy backup uploads with a new uploader plugin (#14894)

2021-11-23 08:45:42 +10:00

badges_controller.rb

FEATURE: Add option to grant badge multiple times to users using Bulk Award (#13571)

2021-07-15 05:53:26 +03:00

color_schemes_controller.rb

FEATURE: User selectable color schemes (#10544)

2020-08-28 10:36:52 -04:00

dashboard_controller.rb

UX: Changes to new features section in admin dashboard (#12029)

2021-02-10 13:12:04 -05:00

email_controller.rb

DEV: Fix typo for email encoded (#15577)

2022-01-14 09:33:15 +10:00

email_styles_controller.rb

FEATURE: customization of html emails (#7934)

2019-07-30 15:05:08 -04:00

email_templates_controller.rb

Add bad_destination_address template to email_templates_controller (#12102)

2021-02-17 09:57:38 +01:00

embeddable_hosts_controller.rb

FIX: use allowlist and blocklist terminology (#10209)

2020-07-27 10:23:54 +10:00

embedding_controller.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

emojis_controller.rb

FIX: Clean up emoji name which is file name (#14980)

2021-11-17 09:20:44 +10:00

groups_controller.rb

FEATURE: Experimental support for group membership via google auth (#14835)

2021-12-09 12:30:27 +00:00

impersonate_controller.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

permalinks_controller.rb

FEATURE: Permalinks for tags

2020-05-25 14:51:01 +02:00

plugins_controller.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

reports_controller.rb

FIX: Only cache reports with exceptions for 1 minute (#11447)

2020-12-09 10:54:41 -06:00

robots_txt_controller.rb

FEATURE: Allow customization of robots.txt (#7884)

2019-07-15 20:47:44 +03:00

screened_emails_controller.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

screened_ip_addresses_controller.rb

DEV: Do not manually require ip_addr (#15535)

2022-01-11 12:43:00 +02:00

screened_urls_controller.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

search_logs_controller.rb

DEV: enable frozen string literal on all files

2019-05-13 09:31:32 +08:00

site_settings_controller.rb

DEV: Remove HTML setting type and sanitization logic. (#14440)

2021-10-04 15:40:35 -03:00

site_texts_controller.rb

FIX: Translation overrides from fallback locale didn't work on client

2021-12-17 14:03:35 +01:00

staff_action_logs_controller.rb

FIX: Don't error when the empty current value in dif (#8406)

2019-11-26 09:17:14 +11:00

themes_controller.rb

SECURITY: moderator shouldn't be able to import a theme via API (stable) (#18420)

2022-09-29 20:13:34 +02:00

user_fields_controller.rb

FEATURE: Add user custom fields to user directory (#13238)

2021-06-07 12:34:01 -05:00

users_controller.rb

DEV: rename single_sign_on classes to discourse_connect (#15332)

2022-01-06 16:28:46 +04:00

versions_controller.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

watched_words_controller.rb

FEATURE: add staff action logs for watched words (#13574)

2021-06-30 11:22:46 +05:30

web_hooks_controller.rb

FIX: Don't display webhooks for inactive plugins (#9206)

2020-03-17 10:39:24 -06:00