discourse/spec
Robin Ward 79ce7085c2 SECURITY: Ensure the invite JSON API matches the UX
Anonymous users could query the invite json and see counts and
summaries which is not allowed in the UX of Discourse.

This commit has those endpoints return a 403 unless the user is
allowed to invite.
2020-03-05 09:23:21 -05:00
..
components DEV: spec suite fails on leap years 2020-02-29 18:30:08 +11:00
fabricators FEATURE: Improving bookmarks part 2 -- Topic Bookmarking (#8954) 2020-02-13 16:26:02 +10:00
fixtures FIX: Bulk badge awards should work even if the CSV has nil values 2020-02-27 11:08:24 -03:00
helpers FIX: blank popular posts in summary emails due to lightbox images 2020-02-21 16:18:38 -05:00
import_export FIX: Import sub-sub-categories (#8810) 2020-01-30 18:46:33 +02:00
initializers FIX: We need to skip users with associated reviewables when auto-approving (#9080) 2020-03-02 14:33:52 -05:00
integration UX: Include public groups in mentionable groups set (#8516) 2019-12-12 13:13:40 +02:00
integrity DEV: Update markdown-it from 8.4.1 to 10.0.0 (#8164) 2019-10-08 13:00:22 +02:00
jobs DEV: Upload and secure media retroactive rake task improvements (#9027) 2020-03-03 10:03:58 +11:00
lib FIX: Don't optimize icons during db:migrate when restoring backup 2020-03-04 16:59:49 +01:00
mailers Fix test another way 2020-02-11 17:07:18 -05:00
models PERF: Allow preloading 'recent time read' for a user (#9076) 2020-03-03 13:57:46 +00:00
multisite FIX: parallel spec system needs a dedicated upload folder for each worker. (#8547) 2019-12-18 11:21:57 +05:30
requests SECURITY: Ensure the invite JSON API matches the UX 2020-03-05 09:23:21 -05:00
serializers FEATURE: Improving bookmarks part 2 -- Topic Bookmarking (#8954) 2020-02-13 16:26:02 +10:00
services Link website when reviewing users 2020-02-19 10:18:05 -05:00
support DEV: Upload and secure media retroactive rake task improvements (#9027) 2020-03-03 10:03:58 +11:00
tasks DEV: Upload and secure media retroactive rake task improvements (#9027) 2020-03-03 10:03:58 +11:00
views/omniauth_callbacks FEATURE: Use full page redirection for all external auth methods (#8092) 2019-10-08 12:10:43 +01:00
rails_helper.rb SECURITY: 2FA with U2F / TOTP 2020-01-15 11:27:12 +01:00