discourse/app
Daniel Waterworth e37ced96bf
DEV: Don't interpret user field names as HTML (#18317)
This isn't a security bug, because only admins can create user fields
and we have to trust admins, because they can change themes, which are
shown site-wide and can contain unrestricted JS.
2022-09-21 12:21:58 -05:00
..
assets DEV: Don't interpret user field names as HTML (#18317) 2022-09-21 12:21:58 -05:00
controllers DEV: Update highlight.js to version 11 (#18282) 2022-09-20 12:43:28 -03:00
helpers DEV: Compile splash screen JS with ember-cli before inlining (#18150) 2022-09-01 09:58:48 +01:00
jobs UX: Use dominant color as image loading placeholder (#18248) 2022-09-20 10:28:17 +01:00
mailers FEATURE: Custom unsubscribe options (#17090) 2022-06-21 15:49:47 -03:00
models DEV: Enforce dominant_color length in validation (#18309) 2022-09-21 11:01:21 +01:00
serializers DEV: Ship first pass of new user page navigation behind feature flag (#18285) 2022-09-21 12:32:47 +08:00
services FIX: Don't delete previous messages when we're inside the sent_recently window. (#18239) 2022-09-13 12:43:24 -03:00
views DEV: Remove support for legacy plugin JS compilation pipeline (#18293) 2022-09-21 12:38:02 +01:00