github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2024-11-28 03:53:51 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
a373bf2a01
discourse/plugins/chat/spec/system
History
Blake Erickson a373bf2a01 SECURITY: XSS on chat excerpts 
Non-markdown tags weren't being escaped in chat excerpts. This could be
triggered by editing a chat message containing a tag (self XSS), or by
replying to a chat message with a tag (XSS).

Co-authored-by: Jan Cernik <jancernik12@gmail.com>
2023-03-16 15:27:09 -06:00
..
list_channels UX: orders public channels by slug instead of title (#20188) 2023-02-07 10:36:28 +01:00
page_objects DEV: Change sidebar header dropdown to use wait_for_animation (#20627) 2023-03-10 14:54:57 +10:00
shortcuts DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
user_menu_notifications DEV: Pass messageId as a dynamic segment instead of a query param (#20013) 2023-02-01 12:39:23 -03:00
user_status DEV: attempts to move all Jobs.run_immediately! at top (#19688) 2023-01-03 11:32:27 +01:00
anonymous_spec.rb DEV: start glimmer-ification and optimisations of chat plugin (#19531) 2022-12-21 13:21:02 +01:00
archive_channel_spec.rb FIX: Improve error reporting and failure modes for channel archiving (#19791) 2023-01-12 10:04:46 +10:00
bookmark_message_spec.rb PERF: applies optimisations on chat-live pane (#20532) 2023-03-06 16:42:11 +01:00
browse_page_spec.rb FIX: correctly uses request_uri to generate load_more_url (#19680) 2023-01-03 00:19:13 +01:00
channel_about_page_spec.rb FEATURE: Allow editing channel slug (#19948) 2023-01-30 13:18:34 +10:00
channel_info_pages_spec.rb DEV: /channel -> /c chat route rename (#19782) 2023-01-27 09:58:12 -03:00
channel_members_page_spec.rb DEV: /channel -> /c chat route rename (#19782) 2023-01-27 09:58:12 -03:00
channel_message_selection_spec.rb FIX: Regression with chat shift+select messages (#20305) 2023-02-15 08:49:56 +01:00
channel_selector_modal_spec.rb DEV: Improve performance of system test sign_in helper (#19579) 2022-12-22 16:03:27 +00:00
channel_settings_page_spec.rb DEV: /channel -> /c chat route rename (#19782) 2023-01-27 09:58:12 -03:00
chat_channel_spec.rb SECURITY: XSS on chat excerpts 2023-03-16 15:27:09 -06:00
chat_composer_spec.rb FIX: correctly filters input with pre-filled value (#20154) 2023-02-02 23:49:36 +01:00
closed_channel_spec.rb REFACTOR: Fix pluralized strings in chat plugin (#20357) 2023-02-20 10:31:02 +01:00
create_channel_spec.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
deleted_channel_spec.rb DEV: start glimmer-ification and optimisations of chat plugin (#19531) 2022-12-21 13:21:02 +01:00
deleted_message_spec.rb PERF: applies optimisations on chat-live pane (#20532) 2023-03-06 16:42:11 +01:00
draft_message_spec.rb FIX: do not show infinite loading state on draft with new users (#20582) 2023-03-08 15:21:20 +01:00
drawer_spec.rb DEV: adds a addChatDrawerStateCallback API (#20640) 2023-03-10 18:49:59 +01:00
edited_message_spec.rb FIX: ensures edited message is correctly re-decorated (#20637) 2023-03-10 17:06:13 +01:00
flag_message_spec.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
hashtag_autocomplete_spec.rb PERF: applies optimisations on chat-live pane (#20532) 2023-03-06 16:42:11 +01:00
jit_messages_spec.rb REFACTOR: Fix pluralized strings in chat plugin (#20357) 2023-02-20 10:31:02 +01:00
mention_warnings_spec.rb PERF: applies optimisations on chat-live pane (#20532) 2023-03-06 16:42:11 +01:00
message_notifications_mobile_spec.rb DEV: attempts to move all Jobs.run_immediately! at top (#19688) 2023-01-03 11:32:27 +01:00
message_notifications_with_sidebar_spec.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
message_user_info.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
move_message_to_channel_spec.rb DEV: start glimmer-ification and optimisations of chat plugin (#19531) 2022-12-21 13:21:02 +01:00
navigating_to_message_spec.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
navigation_spec.rb DEV: /channel -> /c chat route rename (#19782) 2023-01-27 09:58:12 -03:00
network_reconciliation_spec.rb FIX: ensures recovering network doesn't create unread mentions (#19597) 2022-12-23 07:38:45 +01:00
react_to_message_spec.rb FIX: prevents duplicate reactions (#20527) 2023-03-03 20:29:24 +01:00
read_only_spec.rb REFACTOR: Fix pluralized strings in chat plugin (#20357) 2023-02-20 10:31:02 +01:00
sidebar_navigation_menu_spec.rb DEV: /channel -> /c chat route rename (#19782) 2023-01-27 09:58:12 -03:00
sidebars_spec.rb DEV: start glimmer-ification and optimisations of chat plugin (#19531) 2022-12-21 13:21:02 +01:00
silenced_user_spec.rb DEV: start glimmer-ification and optimisations of chat plugin (#19531) 2022-12-21 13:21:02 +01:00
single_thread_spec.rb DEV: Introduces a wait_for_animation system spec helper (#20573) 2023-03-08 16:49:20 +01:00
sticky_date_spec.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
transcript_spec.rb DEV: Introduces a wait_for_animation system spec helper (#20573) 2023-03-08 16:49:20 +01:00
unfollow_dm_channel_spec.rb DEV: Improve performance of system test sign_in helper (#19579) 2022-12-22 16:03:27 +00:00
update_last_read.rb FIX: improves unread state precision (#20615) 2023-03-09 19:06:33 +01:00
uploads_spec.rb FIX: Uploading multiple files to chat could cause canellations (#20605) 2023-03-09 09:17:54 +01:00
user_card_spec.rb DEV: start glimmer-ification and optimisations of chat plugin (#19531) 2022-12-21 13:21:02 +01:00
user_chat_preferences_spec.rb DEV: rework the chat-live-pane (#20519) 2023-03-03 13:09:25 +01:00
visit_channel_spec.rb DEV: Pass messageId as a dynamic segment instead of a query param (#20013) 2023-02-01 12:39:23 -03:00