Guo Xiang Tan c6f5df4caa SECURITY: Don't pass email backup token to sidekiq as a parameter. ... * This exposes the token in the Sidekiq dashboard which can be viewed by an admin and defeats the purpose of using a token in the download backup email ink.		2017-12-18 11:32:26 +08:00
..
admin	SECURITY: Don't pass email backup token to sidekiq as a parameter.	2017-12-18 11:32:26 +08:00
about_controller_spec.rb	FIX: do not show about page to anonymous users for private forums	2017-03-08 13:15:44 +05:30
application_controller_spec.rb	FEATURE: allow users to select theme on single device	2017-05-15 12:48:16 -04:00
badges_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
categories_controller_spec.rb	Revert "FIX: don't overwrite category's logo & background URLs"	2016-09-22 11:30:19 +08:00
category_hashtags_controller_spec.rb	FIX: Clashing category slug.	2016-01-13 15:32:29 +08:00
clicks_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
composer_messages_controller_spec.rb	FEATURE: Prompt users when they are entering duplicate links	2016-06-07 14:47:22 -04:00
directory_items_controller_spec.rb	Upgrade rspec to 3.4.0.	2016-05-30 11:38:38 +08:00
draft_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
email_controller_spec.rb	FIX: Processing incoming email should be done in a background job.	2017-04-24 13:57:28 +08:00
embed_controller_spec.rb	Add test for class_name in EmbedController	2017-05-11 15:16:16 -04:00
export_csv_controller_spec.rb	SECURITY: Validate the entity when downloading a CSV	2017-05-19 16:00:51 -04:00
extra_locales_controller_spec.rb	FIX: eradicate I18n fallback issues 💣	2017-02-24 11:31:21 +01:00
finish_installation_controller_spec.rb	Allow step 0 to resend the confirmation email	2016-10-21 11:34:19 -04:00
groups_controller_spec.rb	FEATURE: Public groups.	2016-12-12 17:00:30 +08:00
invites_controller_spec.rb	SECURITY: Remove disposable invite feature	2017-07-07 20:52:21 -04:00
list_controller_spec.rb	FIX: include canonical meta tag on category pages	2017-07-03 14:45:16 +05:30
metadata_controller_spec.rb	FEATURE: Add /search discovery	2016-03-28 15:07:59 -07:00
notifications_controller_spec.rb	FIX: Incorrect error raised.	2017-04-25 09:59:01 +08:00
omniauth_callbacks_controller_spec.rb	Remove use of stubs in tests.	2017-03-01 10:53:03 +08:00
onebox_controller_spec.rb	FIX: prevent DDoS with lots of _oneboxable_ links	2016-12-20 00:31:10 +01:00
permalinks_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
post_action_users_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
post_actions_controller_spec.rb	FIX: Return 404 if id is not valid.	2017-01-06 10:39:44 +08:00
posts_controller_spec.rb	FIX: User can't remove bookmark from a deleted post.	2017-05-19 12:25:12 +08:00
queued_posts_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
robots_txt_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
search_controller_spec.rb	Remove SearchObserver, aim is to remove all observers	2016-12-22 13:13:14 +11:00
session_controller_spec.rb	FEATURE: new site setting for max logins per ip per hour/minute	2017-02-27 16:58:03 +05:30
similar_topics_controller_spec.rb	Prepare for separation of RSpec helper files	2015-12-01 20:39:42 +00:00
site_controller_spec.rb	FEATURE: anonymized site statistics	2017-03-10 18:50:26 +05:30
static_controller_spec.rb	FEATURE: fallback asset path for multi host setups	2017-03-20 15:59:17 -04:00
steps_controller_spec.rb	FIX: You should be an admin to do the wizard	2016-09-22 11:12:51 -04:00
stylesheets_controller_spec.rb	remove no digest refs	2017-04-18 17:05:33 -04:00
tags_controller_spec.rb	FIX: tags created in secured categories should not be forbidden outside those categories	2017-03-07 11:46:46 -05:00
topics_controller_spec.rb	SECURITY: Any group can be invited into a PM.	2017-12-14 15:18:27 +08:00
uploads_controller_spec.rb	Use webmock to stub external web requests.	2017-05-26 15:19:09 +08:00
user_actions_controller_spec.rb	remove rails-observers	2016-12-22 16:46:53 +11:00
user_api_keys_controller_spec.rb	FEATURE: user API now contains scopes so permission is granular	2016-10-14 16:05:42 +11:00
user_avatars_controller_spec.rb	Fix build.	2017-05-26 16:04:59 +08:00
user_badges_controller_spec.rb	FEATURE: Webhook for user creation and approval	2016-09-19 10:12:55 +08:00
users_controller_spec.rb	SECURITY: signup without verified email using Google auth	2017-10-16 15:23:32 -04:00
users_email_controller_spec.rb	reset bounce score when email is successfully changed	2017-02-20 10:37:01 +01:00
webhooks_controller_spec.rb	FIX: bounce webhooks should also use recipient address	2017-02-05 19:06:35 +01:00
wizard_controller_spec.rb	FIX: You should be an admin to do the wizard	2016-09-22 11:12:51 -04:00