github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-01-21 11:04:06 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
cdaf7f4bb3
discourse/config
History
Martin Brennan 715d4de981
SECURITY: Strip unrendered unicode bidirectional chars in code blocks (#15032) 
When rendering the markdown code blocks we replace the
offending characters in the output string with spans highlighting a textual
representation of the character, along with a title attribute with
information about why the character was highlighted.

The list of characters stripped by this fix, which are the bidirectional
characters considered relevant, are:

U+202A
U+202B
U+202C
U+202D
U+202E
U+2066
U+2067
U+2068
U+2069
2021-11-22 10:46:07 +10:00
..
cloud/cloud66 DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
environments DEV: Use filesystem-based SchemaCache in development (#12901) 2021-04-30 10:54:49 +01:00
initializers DEV: Improve auto-restart parent process detection logic (#13068) 2021-05-14 18:17:31 +01:00
locales SECURITY: Strip unrendered unicode bidirectional chars in code blocks (#15032) 2021-11-22 10:46:07 +10:00
application.rb DEV: Remove unused autoload path. 2021-05-06 10:50:44 +08:00
boot.rb DEV: Remove deprecated bootsnap options (#11929) 2021-02-02 14:39:51 +01:00
cdn.yml.sample
database.yml FEATURE: allow setting postgres connection variables via environment 2021-04-14 13:31:32 -04:00
deploy.rb.sample
discourse_defaults.conf FEATURE: Allow a cluster_name to be configured and used for /srv/status (#12365) 2021-03-15 15:41:59 +11:00
discourse.config.sample
discourse.pill.sample
environment.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
logrotate.conf
multisite.yml.production-sample DEV: Remove db_id from sample multisite config. 2020-05-29 10:48:29 +08:00
nginx.global.conf
nginx.sample.conf DEV: add CORS header for all nginx rules of public folder files. (#12205) 2021-02-25 02:57:37 +05:30
projections.json DEV: Use .hbr for raw template file extension (#8883) 2020-02-11 13:38:12 -06:00
puma.rb remove daemonize setting (#12232) 2021-03-01 16:42:50 +11:00
routes.rb FEATURE: Allow theme tests to be run in production (take 2) (#12845) 2021-04-28 23:12:08 +03:00
sidekiq.yml FEATURE: introduce ultra_low priority queue 2019-01-17 14:53:19 +11:00
site_settings.yml DEV: Oneboxer wildcard subdomains (#13015) 2021-05-13 15:48:35 -04:00
spring.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
thin.yml.sample Add sample Capistrano deployment files 2013-05-02 19:53:37 -07:00
unicorn_launcher FIX: Increase timeout when trying to reload unicorn. 2018-12-04 13:43:14 +08:00
unicorn_upstart.conf
unicorn.conf.rb DEV: Improve bin/unicorn boot time in development environment (#12900) 2021-04-30 11:32:13 +01:00