mirror of
https://github.com/discourse/discourse.git
synced 2025-02-22 20:05:24 +08:00

* SECURITY: moderator shouldn't be able to import a theme via API. * DEV: apply `AdminConstraint` for all the "themes" routes. Co-authored-by: Vinoth Kannan <svkn.87@gmail.com>