discourse/db
Natalie Tay 76f06f6b14
SECURITY: Fixes for stable (#28138)
* SECURITY: Update default allowed iframes list

Change the default iframe url list to all include 3 slashes.

* SECURITY: limit group tag's name length

Limit the size of a group tag's name to 100 characters.

Internal ref - t/130059

* SECURITY: Improve sanitization of SVGs in Onebox (stable)

---------

Co-authored-by: Blake Erickson <o.blakeerickson@gmail.com>
Co-authored-by: Régis Hanol <regis@hanol.fr>
Co-authored-by: David Taylor <david@taylorhq.com>
2024-07-30 14:19:08 +08:00
..
fixtures DEV: Use Discourse::SYSTEM_USER_ID in fixtures/009_users (#24743) 2023-12-07 09:04:45 +10:00
migrate SECURITY: Fixes for stable (#28138) 2024-07-30 14:19:08 +08:00
post_migrate DEV: resolve on conflict (#25848) 2024-02-26 10:04:13 -08:00
api_test_seeds.rb DEV: Apply syntax_tree formatting to db/* 2023-01-09 11:59:41 +00:00