github-mirror/discourse
github-mirror/discourse
2
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-22 23:11:53 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
discourse/app/controllers
History
Ted Johansson 752a2cc654
DEV: Handle bad parameters in TopicsController#wordpress (#23404) 
We're seeing a large number of log noise from this endpoint due to malicious scanners that are trying to send clever params and seeing if they can break something.

This change simply rescues any NoMethodError during parameter parsing and re-raises a Discourse::InvalidParameters exception, which will be caught and render a 400.
2023-09-05 16:35:46 +08:00
..
admin
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
users
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
about_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
application_controller.rb
DEV: Add hidden cross_origin_opener_policy_header site setting (#23346)
2023-08-31 08:50:06 -04:00
associated_groups_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
badges_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
bookmarks_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
bootstrap_controller.rb
FEATURE: Serve RTL versions of admin and plugins CSS bundles for RTL locales (#21876)
2023-06-01 05:27:11 +03:00
categories_controller.rb
DEV: Switch over category settings to new table - Part 2 (#20580)
2023-08-04 10:53:22 +08:00
clicks_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
composer_controller.rb
DEV: Remove elder from codebase and also update 'regular' to 'member' (#20065)
2023-01-31 01:41:25 +08:00
composer_messages_controller.rb
DEV: Move distance_of_time_in_words/time_ago_in_words (#21745)
2023-05-25 14:53:59 +02:00
csp_reports_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
directory_columns_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
directory_items_controller.rb
FIX: Validate page/limit params for directory, user-badges and groups (#22877)
2023-07-31 15:00:05 +01:00
do_not_disturb_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
drafts_controller.rb
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
edit_directory_columns_controller.rb
DEV: Implement staff logs for user columns edits (#21774)
2023-06-07 17:19:58 -05:00
email_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
embed_controller.rb
FEATURE: Update topic/comment embedding parameters (#20181)
2023-02-28 14:31:59 +02:00
exceptions_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
export_csv_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
extra_locales_controller.rb
DEV: Prefer \A and \z over ^ and $ in regexes (#19936)
2023-01-20 12:52:49 -06:00
finish_installation_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
form_templates_controller.rb
DEV: Show form templates in the composer (#21190)
2023-05-29 14:47:18 -07:00
forums_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
groups_controller.rb
FIX: Infinite loading broken on group members list (#23214)
2023-08-24 08:50:20 +08:00
hashtags_controller.rb
DEV: Remove enable_experimental_hashtag_autocomplete logic (#22820)
2023-08-08 11:18:55 +10:00
highlight_js_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
inline_onebox_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
invites_controller.rb
SECURITY: Handle concurrent invite accepts
2023-07-28 12:53:48 +01:00
list_controller.rb
DEV: Update experimental /filter route with tags support (#20874)
2023-03-30 09:00:42 +08:00
metadata_controller.rb
FIX: Use / for start_url in webmanifest on non-subfolder installs (#20167)
2023-02-03 16:48:05 -03:00
new_topic_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
notifications_controller.rb
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
offline_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
onebox_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
permalinks_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
post_action_users_controller.rb
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
post_actions_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
post_readers_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
posts_controller.rb
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
presence_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
published_pages_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
push_notification_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
qunit_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
reviewable_claimed_topics_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
reviewables_controller.rb
FIX: Pending post deletion by creator (#23130)
2023-08-18 15:30:59 +00:00
robots_txt_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
safe_mode_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
search_controller.rb
FIX: Search by tag context was broken (#23006)
2023-08-08 15:15:34 -04:00
session_controller.rb
WIP: Rename Webauthn to DiscourseWebauthn (#23077)
2023-08-18 08:39:10 -04:00
sidebar_sections_controller.rb
SECURITY: limit amount of links in custom sidebar section (#22543)
2023-07-11 15:25:01 -06:00
similar_topics_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
site_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
sitemap_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
slugs_controller.rb
FEATURE: Allow changing slug on create channel (#19928)
2023-01-23 14:48:33 +10:00
static_controller.rb
DEV: Allow accessing sourcemaps on /brotli_asset path (#19894)
2023-01-17 12:49:42 +00:00
steps_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
stylesheets_controller.rb
DEV: Fix subfolder setup in dev env (#21983)
2023-06-12 12:49:26 +02:00
svg_sprite_controller.rb
FIX: Searching for svg sprite icons connecting to default database (#21605)
2023-05-17 14:25:06 +08:00
tag_groups_controller.rb
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
tags_controller.rb
SECURITY: Impose a upper bound on limit params in various controllers
2023-07-28 12:53:46 +01:00
theme_javascripts_controller.rb
DEV: Replace #pluck_first freedom patch with AR #pick in core (#19893)
2023-02-13 12:39:45 +08:00
topics_controller.rb
DEV: Handle bad parameters in TopicsController#wordpress (#23404)
2023-09-05 16:35:46 +08:00
uploads_controller.rb
FIX: Show gif upload size limit error straight away (#21633)
2023-05-18 10:36:34 +02:00
user_actions_controller.rb
PERF: Preload user information when visiting user messages routes (#21929)
2023-06-05 19:24:22 +08:00
user_api_keys_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00
user_avatars_controller.rb
DEV: Enable unless cops
2023-02-21 10:30:48 +01:00
user_badges_controller.rb
FIX: Validate page/limit params for directory, user-badges and groups (#22877)
2023-07-31 15:00:05 +01:00
user_status_controller.rb
FEATURE: User Status API (#19149)
2022-11-24 19:16:28 +04:00
users_controller.rb
DEV: Refactor rp_id and rp_name (#23339)
2023-08-31 09:11:23 -04:00
users_email_controller.rb
WIP: Rename Webauthn to DiscourseWebauthn (#23077)
2023-08-18 08:39:10 -04:00
webhooks_controller.rb
FEATURE: Add Mailpace webhook (#21981)
2023-06-08 20:06:20 +03:00
wizard_controller.rb
DEV: Apply syntax_tree formatting to app/*
2023-01-09 14:14:59 +00:00