discourse/spec/requests
Sam 69bc8f526a SECURITY: only allow picking of avatars created by self (#6417)
* SECURITY: only allow picking of avatars created by self

Also adds origin tracking to all uploads including de-duplicated uploads
2018-12-18 13:57:49 +08:00
..
admin UX: Improve email testing admin tool. (#6308) 2018-08-29 23:14:16 +02:00
about_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
application_controller_spec.rb SECURITY: enforce hostname to match discourse hostname 2018-11-15 16:17:22 +11:00
badges_controller_spec.rb REFACTOR: about & badge controllers => requests 2018-05-22 13:45:13 +10:00
categories_controller_spec.rb format json better with spaces in my test 2018-08-30 14:39:40 -06:00
category_hashtags_controller_spec.rb REFACTOR: category hashtags controller specs to requests (#5936) 2018-06-07 13:09:23 +08:00
clicks_controller_spec.rb REFACTOR: clicks controller specs to requests (#5929) 2018-06-07 12:57:29 +08:00
composer_controller_spec.rb FIX: return 429 when admin api key is limited on admin route 2018-01-12 14:15:26 +11:00
composer_messages_controller_spec.rb REFACTOR: composer messages controller specs to requests (#5940) 2018-06-07 13:51:52 +08:00
directory_items_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
draft_controller_spec.rb REFACTOR: draft controller specs to requests (#5942) 2018-06-07 12:24:20 +08:00
drafts_controller_spec.rb FEATURE: Drafts view in user profile 2018-08-01 16:34:54 +10:00
email_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
embed_controller_spec.rb FEATURE: backend support for user-selectable components 2018-08-08 14:46:34 +10:00
export_csv_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
extra_locales_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
finish_installation_controller_spec.rb FEATURE: Make initial admins TL1 2018-08-22 15:45:24 +10:00
groups_controller_spec.rb FIX: Load more on groups page does not account for params. 2018-08-20 17:08:50 +08:00
inline_onebox_controller_spec.rb REFACTOR: inline onebox controller specs to requests 2018-06-07 13:11:45 +08:00
invites_controller_spec.rb SECURITY: Require groups to be given when inviting to a restricted category. (#6715) 2018-12-07 15:54:53 +08:00
list_controller_spec.rb FIX: wrong category links on subfolder install in rss feed for a category topic list 2018-09-07 10:03:30 -04:00
metadata_controller_spec.rb FEATURE: Update the webmanifest 2018-06-14 00:13:28 -03:00
notifications_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
offline_controller_spec.rb REFACTOR: offline controller spec to requests (#5943) 2018-06-07 12:24:05 +08:00
omniauth_callbacks_controller_spec.rb SPEC: redirect to original URL after social signup 2018-09-05 03:24:50 +05:30
onebox_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
permalinks_controller_spec.rb REFACTOR: permalinks controller specs to requests (#5934) 2018-06-07 13:08:13 +08:00
post_action_users_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
post_actions_controller_spec.rb FIX: Properly display error when post action fails to create. 2018-06-20 21:20:23 +08:00
posts_controller_spec.rb FEATURE: Allow admins to reply without topic bump 2018-08-10 10:48:30 +10:00
push_notification_controller_spec.rb Refactor of PushSubscriptionPusher. 2018-05-09 08:14:14 +08:00
queued_posts_controller_spec.rb FIX: allow staff to remove tags from queued topics 2018-06-26 17:08:40 +05:30
robots_txt_controller_spec.rb FEATURE: An API to help sites build robots.txt files programatically 2018-04-16 15:43:20 -04:00
safe_mode_controller_spec.rb Allow staff members to enable safe mode, even if disabled 2018-04-25 11:49:57 -04:00
search_controller_spec.rb FIX: return a 400 error instead of 500 for null injections 2018-09-04 12:11:52 +10:00
session_controller_spec.rb FEATURE: Use S3 dualstack endpoints 2018-08-27 11:22:46 +10:00
similar_topics_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
site_controller_spec.rb FEATURE: adds header text/background color to site (#6462) 2018-11-01 21:29:04 +01:00
static_controller_spec.rb UX: add a route /rules as an alias for /faq and /guidelines 2018-07-26 15:38:08 -04:00
steps_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
stylesheets_controller_spec.rb FEATURE: backend support for user-selectable components 2018-08-08 14:46:34 +10:00
tags_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
topics_controller_spec.rb SECURITY: Require groups to be given when inviting to a restricted category. (#6715) 2018-12-07 15:54:53 +08:00
uploads_controller_spec.rb correct regression around file renaming 2018-08-20 16:08:05 +10:00
user_actions_controller_spec.rb REFACTOR: user actions controller specs to requests 2018-06-07 12:52:06 +08:00
user_api_keys_controller_spec.rb UX: bumps the user-api-key version to 3 (#6526) 2018-11-01 21:29:29 +01:00
user_avatars_controller_spec.rb FIX: set old last modified date for invalid avatars 2018-08-31 17:07:31 +10:00
user_badges_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
users_controller_spec.rb SECURITY: only allow picking of avatars created by self (#6417) 2018-12-18 13:57:49 +08:00
users_email_controller_spec.rb FEATURE: improve API error reporting for invalid records 2018-08-21 11:54:34 +10:00
webhooks_controller_spec.rb DEV: Assert for 200 response code to avoid changing magic helper in the future. 2018-06-07 16:11:09 +08:00
wizard_controller_spec.rb Merge branch 'wizard-controller' of https://github.com/OsamaSayegh/discourse into OsamaSayegh-wizard-controller 2018-06-07 12:27:48 +08:00