Vinoth Kannan 7b53e610c1

SECURITY: limit the number of characters in watched word replacements. ...

The watch words controller creation function, create_or_update_word(), doesn’t validate the size of the replacement parameter, unlike the word parameter, when creating a replace watched word. So anyone with moderator privileges can create watched words with almost unlimited characters.

2024-07-15 19:25:17 +08:00

..

admin_about_config_area.rb

DEV: Wiring for the admin about config page (#27492)

2024-07-01 05:40:37 +03:00

admin_customize_themes.rb

FEATURE: direct link to components for admin sidebar (#26644)

2024-04-17 11:45:59 +10:00

admin_dashboard_new_features.rb

…

admin_flag_form.rb

FEATURE: created edit and delete flags (#27484)

2024-07-03 08:45:37 +10:00

admin_flags.rb

FEATURE: created edit and delete flags (#27484)

2024-07-03 08:45:37 +10:00

admin_objects_theme_setting_editor.rb

UX: Improve validation error message when saving theme objects setting (#26455)

2024-04-02 11:55:51 +08:00

admin_site_settings.rb

DEV: Fix flaky admin confirmation spec (#27784)

2024-07-09 12:05:31 +10:00

admin_staff_action_logs.rb

DEV: Allow for setting a message with SiteSetting.set_and_log (#27447)

2024-06-13 14:59:49 +10:00

admin_user_fields.rb

FEATURE: User fields required for existing users - Part 2 (#27172)

2024-06-25 19:32:18 +08:00

admin_watched_words.rb

SECURITY: limit the number of characters in watched word replacements.

2024-07-15 19:25:17 +08:00

admin_web_hook_events.rb

FEATURE: Add Filter for Webhook Events by Status (#27332)

2024-06-07 10:26:00 -05:00

base.rb

…

category.rb

FIX: should not raise error when minimum_required_tags value not defined for category. (#27658)

2024-07-01 07:14:34 +05:30

csv_export_pm.rb

…

discovery.rb

…

form_template.rb

FIX: Customize form template view modal footer buttons (#25804)

2024-02-21 22:20:56 -08:00

group_activity_posts.rb

FIX: respect creation date when paginating group activity posts (#24993)

2024-01-11 13:37:27 -03:00

group.rb

FIX: deleting a groups was throwing an error (#26623)

2024-04-15 08:35:50 +02:00

header.rb

FIX: In topic search for glimmer header (#26040)

2024-03-07 11:14:43 -07:00

review.rb

…

search.rb

FIX: "in posts by" user search (#27628)

2024-06-27 14:20:18 +10:00

tag.rb

…

topic.rb

FEATURE: admin can disable flags (#27171)

2024-05-29 14:39:58 +10:00

user_notifications.rb

…

user_preferences_account.rb

…

user_preferences_interface.rb

…

user_preferences_navigation_menu.rb

…

user_preferences_profile.rb

FIX: show cooked bio in user profile (#27734)

2024-07-05 12:31:57 +02:00

user_preferences_security.rb

…

user_preferences.rb

DEV: Fix flaky "Changing email" system tests (#25805)

2024-02-22 10:46:37 +08:00

user_private_messages.rb

…

user_reset_password.rb

FIX: User can't reset password with backup codes when only security key is enabled (#27368)

2024-06-06 14:30:42 +08:00

user.rb

…

wizard.rb

FEATURE: after wizard admin is redirected to the guide page (#26696)

2024-04-23 10:04:15 +10:00