David Taylor ec9734bc42

SECURITY: Expand and improve SSRF Protections (stable) (#18816) ...

See https://github.com/discourse/discourse/security/advisories/GHSA-rcc5-28r3-23rr

Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com>
Co-authored-by: Daniel Waterworth <me@danielwaterworth.com>

2022-11-01 16:34:12 +00:00

..

engine

SECURITY: Expand and improve SSRF Protections (stable) (#18816)

2022-11-01 16:34:12 +00:00

mixins

FIX: Add another method to check binary file (#15648)

2022-01-20 23:47:18 +02:00

templates

FIX: Hide excerpt of binary files in GitHub onebox (#15639)

2022-01-19 14:45:36 +02:00

discourse_onebox_sanitize_config.rb

FEATURE: Add disable_onebox_media_download_controls hidden site setting (#12208)

2021-02-25 12:39:15 +10:00

domain_checker.rb

FIX: Only block domains at the final destination (#15689) (#15783)

2022-02-03 09:42:06 +08:00

engine.rb

FIX: origins_to_regexes should always return an array (#15589)

2022-01-17 12:48:41 -05:00

file_type_finder.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

helpers.rb

SECURITY: Expand and improve SSRF Protections (stable) (#18816)

2022-11-01 16:34:12 +00:00

layout_support.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

layout.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

matcher.rb

FEATURE: Onebox can match engines based on the content_type (#13876)

2021-07-30 13:36:30 -04:00

oembed.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

open_graph.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

preview.rb

FIX: return an empty result if response from Amazon is missing expected attributes (#13173)

2021-06-01 16:23:18 -04:00

sanitize_config.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

status_check.rb

SECURITY: Expand and improve SSRF Protections (stable) (#18816)

2022-11-01 16:34:12 +00:00

template_support.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30

view.rb

DEV: Absorb onebox gem into core (#12979)

2021-05-26 15:11:35 +05:30