discourse/plugins/chat/db/post_migrate
Natalie Tay 5eaf080239
SECURITY: Limit chat drafts length and preloaded count (#19987)
Only allow maximum of `50_000` characters for chat drafts. A hidden `max_chat_draft_length` setting can control this limit. A migration is also provided to delete any abusive draft in the database.

The number of drafts loaded on current user has also been limited and ordered by most recent update.

Note that spec files moved are not directly related to the fix.

Co-authored-by: Joffrey JAFFEUX <j.jaffeux@gmail.com>
Co-authored-by: Régis Hanol <regis@hanol.fr>
2023-01-25 13:50:10 +02:00
..
20220321235638_drop_chat_message_post_connections_table.rb
20220504080457_drop_old_chat_message_post_id_action_code_columns.rb
20220516142658_remove_email_statuses_table.rb
20220518180642_remove_user_option_last_emailed_at.rb
20220526135414_remove_corrupted_last_read_message_id.rb
20220531105951_drop_user_chat_channel_last_reads.rb
20220630074200_drop_chat_isolated_from_user_options.rb
20220701195731_convert_chatable_topics_to_categories.rb
20221004122254_delete_reviewables_targetting_deleted_chat_messages.rb
20221018091412_migrate_chat_channels.rb
20221027090832_migrate_dm_channels.rb
20221104054957_backfill_channel_slugs.rb DEV: Fix broken slug migration (#18951) 2022-11-09 11:08:02 +10:00
20221117052348_truncate_chat_messages_over_max_length.rb SECURITY: Limit chat message char length (#19207) 2022-11-28 10:48:30 +10:00
20221117142910_delete_orphaned_channels.rb FIX: Delete associated channel upon category deletion 2022-11-22 10:04:29 +01:00
20221201032830_drop_tmp_chat_slug_tables.rb FIX: Ensure chat channel slug uniqueness at DB level (#19277) 2022-12-02 11:15:43 +10:00
20221202043755_update_chat_channel_message_counts.rb DEV: Add messages_count to ChatChannel table (#19295) 2022-12-06 08:40:46 +10:00
20230116090324_drop_chat_drafts_over_max_length.rb SECURITY: Limit chat drafts length and preloaded count (#19987) 2023-01-25 13:50:10 +02:00
20230123025112_move_chat_uploads_to_upload_references_post.rb DEV: Use UploadReference instead of ChatUpload in chat (#19947) 2023-01-24 13:28:21 +10:00