Alan Guo Xiang Tan 7a8b5cdd5c

DEV: Improve tests coverage when listing private messages. (#14385) ...

This is in response to the security incident published in
https://github.com/discourse/discourse/security/advisories/GHSA-vm3x-w6jm-j9vv.

The security incident highlighted a gap in our test suite so we're
adding more test cases to ensure that personal and group messages do not
leak between users in the future.

2021-09-21 10:39:59 +08:00

..

components

FEATURE: Topic-level bookmarks (#14353)

2021-09-21 08:45:47 +10:00

fabricators

DEV: Ignore reminder_type for bookmarks (#14349)

2021-09-16 09:56:54 +10:00

fixtures

FIX: Handle forwarded email quotes around Reply-To display name (#14384)

2021-09-20 16:26:18 +10:00

helpers

FIX: Offer site_logo_dark_url as an option for dark mode themes (#14361)

2021-09-16 17:47:51 -04:00

import_export

FEATURE: Rake task to export groups (#9450)

2020-04-17 14:59:54 -07:00

initializers

FEATURE: A low priority filter for the review queue. (#12822)

2021-04-23 15:34:24 -03:00

integration

DEV: Isolate multisite specs (#13634)

2021-07-07 18:57:42 +02:00

integrity

DEV: Fix a flaky Onceoff spec (#13314)

2021-06-07 20:38:31 +02:00

jobs

DEV: use upload id to save in theme setting instead of URL. (#14341)

2021-09-16 07:58:53 +05:30

lib

DEV: Improve tests coverage when listing private messages. (#14385)

2021-09-21 10:39:59 +08:00

mailers

FIX: add locales for group mention PM variants (#14358)

2021-09-16 23:07:45 +05:30

models

FIX: use active record update_attribute instead of mini sql. (#14367)

2021-09-21 09:29:12 +08:00

multisite

FIX: Use random file name for temporary uploads (#14250)

2021-09-06 10:21:20 +10:00

requests

FEATURE: Topic-level bookmarks (#14353)

2021-09-21 08:45:47 +10:00

script/import_scripts

DEV: If disabled do not change setting after import (#12142)

2021-02-19 09:33:35 -07:00

serializers

FEATURE: Topic-level bookmarks (#14353)

2021-09-21 08:45:47 +10:00

services

FIX: Update only passed custom fields (#14357)

2021-09-17 13:37:56 +03:00

support

FIX: Make sure reset-new for tracked is not limited by per_page count (#13395)

2021-06-17 08:20:09 +10:00

tasks

FIX: remove migrate_from_s3 task that silently corrupts data (#11703)

2021-01-17 22:33:29 +01:00

views/omniauth_callbacks

FEATURE: Use full page redirection for all external auth methods (#8092)

2019-10-08 12:10:43 +01:00

rails_helper.rb

Revert "DEV: Move rate limiter disable to after :each for tests (#13986)" (#13987)

2021-08-10 14:12:36 +10:00

swagger_helper.rb

DEV: Refactor the api docs for the user endpoint (#14377)

2021-09-20 10:04:57 -06:00