Alan Guo Xiang Tan c6ef6632c6 SECURITY: User's read state for topic is leaked to unauthorized clients. ...

A user's read state for a topic such as the last read post number and the notification level is exposed.

2021-08-12 12:44:39 +08:00

..

components

SECURITY: User's read state for topic is leaked to unauthorized clients.

2021-08-12 12:44:39 +08:00

fabricators

FEATURE: add support for like webhooks (#12917)

2021-04-30 17:08:38 -07:00

fixtures

FIX: Catch UndefinedConversionError for inbound emails (#13000)

2021-05-10 14:26:23 +10:00

helpers

A11Y: sets the html lang to user's locale when possible (#12007)

2021-02-10 16:12:09 +01:00

import_export

FEATURE: Rake task to export groups (#9450)

2020-04-17 14:59:54 -07:00

initializers

FEATURE: A low priority filter for the review queue. (#12822)

2021-04-23 15:34:24 -03:00

integration

DEV: Retry-after header values should be strings (#12475)

2021-03-23 20:32:36 +01:00

integrity

FEATURE: Add anchor links to headings (#12379)

2021-03-23 10:45:06 +02:00

jobs

DEV: Periodically delete old email change requests (#13054)

2021-05-14 10:34:56 +03:00

lib

DEV: Remove duplicate test (#12989)

2021-05-07 15:34:14 -06:00

mailers

FEATURE: Send an email notification when a post is approved. (#12665)

2021-04-12 12:08:23 -03:00

models

SECURITY: User's read state for topic is leaked to unauthorized clients.

2021-08-12 12:44:39 +08:00

multisite

DEV: Prevents rate limits for new feature checks on multisite (#12053)

2021-02-12 08:52:59 -05:00

requests

SECURITY: Destroy EmailToken when EmailChangeRequest is destroyed (#13950)

2021-08-06 19:27:09 -04:00

script/import_scripts

DEV: If disabled do not change setting after import (#12142)

2021-02-19 09:33:35 -07:00

serializers

SECURITY: Do not allow unauthorized access to category edit UI (#13252)

2021-06-03 14:35:27 -04:00

services

FIX: Disable lightboxing of animated images (#13099)

2021-06-03 14:34:36 -04:00

support

DEV: remove unused Helpers::StubbedJob (#12960)

2021-05-06 13:04:41 +02:00

tasks

FIX: remove migrate_from_s3 task that silently corrupts data (#11703)

2021-01-17 22:33:29 +01:00

views/omniauth_callbacks

FEATURE: Use full page redirection for all external auth methods (#8092)

2019-10-08 12:10:43 +01:00

rails_helper.rb

DEV: removes unused set_env (#12961)

2021-05-06 13:04:18 +02:00

swagger_helper.rb

api docs example (#11997)

2021-02-08 10:09:44 -07:00