discourse/app
Alan Guo Xiang Tan cbcf8a064b
SECURITY: Don't expose user post counts to users who can't see the topic (#19728)
Co-authored-by: Penar Musaraj <pmusaraj@gmail.com>

Co-authored-by: Daniel Waterworth <me@danielwaterworth.com>
Co-authored-by: Penar Musaraj <pmusaraj@gmail.com>
2023-01-05 06:08:19 +08:00
..
assets SECURITY: Sanitize PendingPost titles before rendering to prevent XSS (#19726) 2023-01-05 06:08:05 +08:00
controllers SECURITY: Don't expose user post counts to users who can't see the topic (#19728) 2023-01-05 06:08:19 +08:00
helpers FEATURE: Optionally allow a separate s3_asset_cdn_url to be specified (#19284) 2022-12-08 10:36:20 +00:00
jobs SECURITY: BCC active user emails from group SMTP (#19725) 2023-01-05 06:07:50 +08:00
mailers SECURITY: BCC active user emails from group SMTP (#19725) 2023-01-05 06:07:50 +08:00
models SECURITY: BCC active user emails from group SMTP (#19725) 2023-01-05 06:07:50 +08:00
serializers DEV: Refactor whispers_allowed_groups_names (#19691) 2023-01-03 10:28:39 -03:00
services PERF: Use user-specific channel for message-bus logout (#19719) 2023-01-04 19:55:52 +00:00
views FIX: Broken images on subfolder installs (#19404) 2022-12-09 11:24:12 -07:00