discourse

mirror of https://github.com/discourse/discourse.git synced 2025-02-21 01:02:38 +08:00

History

SECURITY: Strip unrendered unicode bidirectional chars in code blocks (#15032 )

When rendering the markdown code blocks we replace the
offending characters in the output string with spans highlighting a textual
representation of the character, along with a title attribute with
information about why the character was highlighted.

The list of characters stripped by this fix, which are the bidirectional
characters considered relevant, are:

U+202A
U+202B
U+202C
U+202D
U+202E
U+2066
U+2067
U+2068
U+2069

2021-11-22 10:43:03 +10:00

assets

SECURITY: Strip unrendered unicode bidirectional chars in code blocks (#15032 )

2021-11-22 10:43:03 +10:00

controllers

DEV: Extract shared external upload routes into controller helper (#14984 )

2021-11-18 09:17:23 +10:00

helpers

DEV: Allow actions to change the manifest endpoint (#14522 )

2021-10-06 15:41:52 -05:00

jobs

FIX: Drop malformed CC addresses in GroupSmtpEmail job (#14934 )