github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-13 15:32:45 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
9ed203ed8c
discourse/lib/onebox
History
Natalie Tay 76f06f6b14
SECURITY: Fixes for stable (#28138) 
* SECURITY: Update default allowed iframes list

Change the default iframe url list to all include 3 slashes.

* SECURITY: limit group tag's name length

Limit the size of a group tag's name to 100 characters.

Internal ref - t/130059

* SECURITY: Improve sanitization of SVGs in Onebox (stable)

---------

Co-authored-by: Blake Erickson <o.blakeerickson@gmail.com>
Co-authored-by: Régis Hanol <regis@hanol.fr>
Co-authored-by: David Taylor <david@taylorhq.com>
2024-07-30 14:19:08 +08:00
..
engine SECURITY: Avoid the use of Object#send in Onebox::Engine::StandardEmbed 2024-07-03 20:12:21 +08:00
mixins FIX: Localize text in github oneboxes (#25327) 2024-01-19 11:26:06 -03:00
templates FIX: Allow sanitized-HTML in GH issues and categories oneboxes. (#25374) 2024-01-22 15:25:29 -03:00
domain_checker.rb DEV: Fix various rubocop lints (#24749) 2023-12-06 23:25:00 +01:00
engine.rb DEV: Fix various rubocop lints (#24749) 2023-12-06 23:25:00 +01:00
file_type_finder.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
helpers.rb DEV: Replace custom Onebox symbolize_keys implementation with ActiveSupport (#23828) 2023-10-09 09:32:09 +02:00
json_ld.rb DEV: Replace custom Onebox blank implementation with ActiveSupport (#23827) 2023-10-07 19:54:26 +02:00
layout_support.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
layout.rb DEV: Replace custom Onebox symbolize_keys implementation with ActiveSupport (#23828) 2023-10-09 09:32:09 +02:00
matcher.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
movie.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
normalizer.rb DEV: Replace custom Onebox blank implementation with ActiveSupport (#23827) 2023-10-07 19:54:26 +02:00
oembed.rb DEV: Replace custom Onebox symbolize_keys implementation with ActiveSupport (#23828) 2023-10-09 09:32:09 +02:00
open_graph.rb DEV: Replace custom Onebox blank implementation with ActiveSupport (#23827) 2023-10-07 19:54:26 +02:00
preview.rb DEV: Apply syntax_tree formatting to lib/* 2023-01-09 12:10:19 +00:00
sanitize_config.rb SECURITY: Fixes for stable (#28138) 2024-07-30 14:19:08 +08:00
status_check.rb SECURITY: Expand and improve SSRF Protections (#18815) 2022-11-01 16:33:17 +00:00
template_support.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
view.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30