David Taylor fa3c46cf07

SECURITY: Improve validation of SNS subscription confirm (#14672) ...

An upstream validation bug in the aws-sdk-sns library could enable RCE under certain circumstances. This commit updates the upstream gem, and adds additional validation to provide defense-in-depth.

2021-10-20 22:20:35 +01:00

..

admin_confirmation_email.rb

UX: show user email address on "grant admin access" email and UI

2019-11-04 14:47:00 +05:30

anonymize_user.rb

FEATURE: multiple use invite links (#9813)

2020-06-09 20:49:32 +05:30

automatic_group_membership.rb

UX: drop the automatic_membership_retroactive column from groups model. (#9430)

2020-04-22 22:07:39 +05:30

backup_chunks_merger.rb

PERF: Remove database query when publishing to staff users.

2020-04-27 11:50:21 +08:00

bulk_grant_trust_level.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

bulk_invite.rb

FIX: Autocorrect values for dropdown imported user fields (#12572)

2021-03-31 19:19:57 +03:00

bulk_user_title_update.rb

FIX: Unassign user titles when a badge is deleted (#9573)

2020-05-02 18:02:28 -07:00

bump_topic.rb

DEV: Change Topic Timer from enqueue_at scheduled jobs to incrementally executed jobs (#11698)

2021-01-19 13:30:58 +10:00

clear_slow_mode.rb

DEV: Change Topic Timer from enqueue_at scheduled jobs to incrementally executed jobs (#11698)

2021-01-19 13:30:58 +10:00

close_topic.rb

FEATURE: Topic timer UI revamp (#11912)

2021-02-03 10:13:32 +10:00

confirm_sns_subscription.rb

SECURITY: Improve validation of SNS subscription confirm (#14672)

2021-10-20 22:20:35 +01:00

crawl_topic_link.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

create_avatar_thumbnails.rb

DEV: Remove gifsicle dependency (#10357)

2020-10-16 13:41:27 +03:00

create_backup.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

create_linked_topic.rb

FIX: when creating linked topics make sure they belong to same category (#11188)

2020-11-11 00:44:27 +05:30

create_user_reviewable.rb

Link website when reviewing users

2020-02-19 10:18:05 -05:00

critical_user_email.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

delete_inaccessible_notifications.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

delete_replies.rb

FEATURE: Allow durations < 1 hour and < 1 day for topic timers where duration is specified (auto delete replies, close based on last post) (#11961)

2021-02-05 10:12:56 +10:00

delete_topic.rb

DEV: Change Topic Timer from enqueue_at scheduled jobs to incrementally executed jobs (#11698)

2021-01-19 13:30:58 +10:00

download_avatar_from_url.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

download_backup_email.rb

FIX: Replace deprecated URI.encode, URI.escape, URI.unescape and URI.unencode (#8528)

2019-12-12 12:49:21 +10:00

download_profile_background_from_url.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

emit_web_hook_event.rb

FEATURE: add support for like webhooks (#12917)

2021-04-30 17:08:38 -07:00

enable_bootstrap_mode.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

export_csv_file.rb

PERF: properly preload emails to speed up user exports (#12778)

2021-04-21 10:42:07 +10:00

export_user_archive.rb

FIX: Send a different message if export fails (#12799)

2021-04-22 20:21:31 +03:00

feature_topic_users.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

generate_topic_thumbnails.rb

FIX: Handle a deleted topic in thumbnail generation

2020-05-11 13:32:37 -03:00

group_pm_alert.rb

PERF: Async notify users after inviting group (#12697)

2021-04-14 19:30:51 +03:00

group_smtp_email.rb

DEV: Add created_via column to IncomingEmail (#11751)

2021-01-20 13:22:41 +10:00

index_category_for_search.rb

FIX: don't error-index category job when missing category

2020-12-01 09:30:53 +08:00

invite_email.rb

FIX: Correctly use invite to topic email templates (#12411)

2021-03-16 17:08:54 +02:00

invite_password_instructions_email.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

make_embedded_topic_visible.rb

FIX: Concurrency issues with making topic embedded posts visible

2020-04-20 15:11:59 -04:00

mass_award_badge.rb

FEATURE: Support uploading a csv with either user emails or usernames (#8971)

2020-02-18 10:53:12 -03:00

merge_user.rb

PERF: run user merging task in a background job. (#10961)

2020-12-10 15:52:08 +11:00

notify_category_change.rb

FIX: correct notification when tag or category is added (#8801)

2020-01-29 11:03:47 +11:00

notify_mailing_list_subscribers.rb

FIX: no email when the category is muted and mailing list is on (#11490)

2020-12-16 09:30:21 +11:00

notify_moved_posts.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

notify_post_revision.rb

FIX: Use destroy_all instead of delete_all for shared drafts

2020-03-05 11:13:43 -08:00

notify_reviewable.rb

FIX: sync reviewable count when opening the hamburger menu (#10368)

2020-08-07 18:13:02 +02:00

notify_tag_change.rb

FIX: do not notify when the hidden tag is added or removed (#12025)

2021-02-11 10:03:45 +11:00

open_topic.rb

FEATURE: Topic timer UI revamp (#11912)

2021-02-03 10:13:32 +10:00

post_alert.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

post_update_topic_tracking_state.rb

FIX: Check if post.topic exists before publishing topic updates (#11900)

2021-02-09 16:41:22 +11:00

process_bulk_invite_emails.rb

FIX: Zeitwerk-related fixes for jobs. (#8219)

2019-10-21 20:25:35 +03:00

process_email.rb

DEV: Add created_via column to IncomingEmail (#11751)

2021-01-20 13:22:41 +10:00

process_post.rb

DEV: Move autotag to topic creator (#12790)

2021-04-23 16:55:34 +03:00

process_sns_notification.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

publish_topic_to_category.rb

DEV: Change Topic Timer from enqueue_at scheduled jobs to incrementally executed jobs (#11698)

2021-01-19 13:30:58 +10:00

pull_hotlinked_images.rb

FEATURE: Add a site setting to allow emojis to come from an external URL (#12180)

2021-03-02 16:04:16 -03:00

push_notification.rb

FIX: Mobile app notification urls w/ subfolder (#12282)

2021-03-04 07:07:37 -07:00

rebake_custom_emoji_posts.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

rebake_posts_for_upload.rb

FIX: Mark secure media upload insecure automatically if used for theme component (#8413)

2019-11-28 07:32:17 +10:00

retrieve_topic.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

run_heartbeat.rb

DEV: Replace Time.new with Time.now (#9142)

2020-03-09 17:37:49 +01:00

send_push_notification.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

send_system_message.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

suspicious_login.rb

FIX: Zeitwerk-related fixes for jobs. (#8219)

2019-10-21 20:25:35 +03:00

sync_topic_user_bookmarked.rb

FIX: Topic user bookmarked column is out of sync after post moves (#12612)

2021-04-14 09:10:53 +10:00

toggle_topic_closed.rb

DEV: Split toggle topic close job (#11679)

2021-01-13 08:49:29 +10:00

topic_action_converter.rb

FIX: Limit personal message participants when converting from topic (#9343)

2020-04-03 16:42:01 +01:00

topic_reminder.rb

FEATURE: Remove user topic timers and migrate to bookmarks with reminders (#10474)

2020-09-14 11:11:55 +10:00

topic_timer_base.rb

DEV: Change Topic Timer from enqueue_at scheduled jobs to incrementally executed jobs (#11698)

2021-01-19 13:30:58 +10:00

truncate_user_flag_stats.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

unpin_topic.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

update_gravatar.rb

FIX: Gravatar download attempt if user is missing their email

2020-09-02 20:19:46 -06:00

update_group_mentions.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

update_s3_inventory.rb

FEATURE: Add hidden setting to disable configuration of inventory bucket

2020-01-14 17:23:12 +01:00

update_top_redirection.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

update_topic_upload_security.rb

FEATURE: Update upload security status on post move, topic conversion, category change (#8731)

2020-01-23 12:01:10 +10:00

update_username.rb

FIX: Don't raise error in update username job if user has been deleted.

2020-09-02 11:17:17 +08:00

user_email.rb

DEV: Set disable_mailing_list_mode automatically (#12402)

2021-03-17 17:39:10 +02:00