Guo Xiang Tan 1590387bd1 SECURITY: Users can pick non-avatar uploads. ...

https://meta.discourse.org/t/bug-report-idor-on-avatar-pick-function-discussions-udacity-com/103564

2018-12-18 13:57:54 +08:00

..

components

SECURITY: Users can pick non-avatar uploads.

2018-12-18 13:57:54 +08:00

fabricators

uses emoji versions for specs (#6276)

2018-08-16 13:45:30 +02:00

fixtures

Replacing default brown category color

2018-08-24 14:18:14 -04:00

helpers

FIX: improve support for subfolder S3 CDN

2018-08-22 12:31:13 +10:00

import_export

FIX: topic and category exporters were only exporting users who created the first post

2018-01-16 12:51:53 -05:00

integration

FEATURE: Automatically expire keys if not used for a configurable amount of time. (#6264)

2018-08-20 17:36:14 +02:00

integrity

correct regression and add integrity spec for onceoffs

2018-06-20 09:09:31 +10:00

jobs

FIX: Onceoff job to fix missing user profile backgrounds.

2018-10-01 18:31:09 +08:00

lib

SECURITY: only allow picking of avatars created by self (#6417)

2018-12-18 13:57:49 +08:00

mailers

FIX: Notifications shouldn't use user locale unless allow_user_locale is enabled

2018-09-05 11:44:28 +02:00

models

SECURITY: Require groups to be given when inviting to a restricted category. (#6715)

2018-12-07 15:54:53 +08:00

multisite

DEV: Attempt to stablize multisite tests.

2018-08-30 17:31:17 +08:00

requests

SECURITY: only allow picking of avatars created by self (#6417)

2018-12-18 13:57:49 +08:00

serializers

FIX: Only serialize group membership domains for administrators (#6771)

2018-12-14 15:49:05 +00:00

services

FIX: don't index urls to local files

2018-09-14 12:31:35 +10:00

support

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

tasks

…

views/omniauth_callbacks

…

rails_helper.rb

DEV: Refactor test to not call private method.

2018-08-21 14:29:58 +08:00