discourse/lib/onebox
David Taylor ec9734bc42
SECURITY: Expand and improve SSRF Protections (stable) (#18816)
See https://github.com/discourse/discourse/security/advisories/GHSA-rcc5-28r3-23rr

Co-authored-by: OsamaSayegh <asooomaasoooma90@gmail.com>
Co-authored-by: Daniel Waterworth <me@danielwaterworth.com>
2022-11-01 16:34:12 +00:00
..
engine SECURITY: Expand and improve SSRF Protections (stable) (#18816) 2022-11-01 16:34:12 +00:00
mixins FIX: Add another method to check binary file (#15648) 2022-01-20 23:47:18 +02:00
templates FIX: Hide excerpt of binary files in GitHub onebox (#15639) 2022-01-19 14:45:36 +02:00
discourse_onebox_sanitize_config.rb FEATURE: Add disable_onebox_media_download_controls hidden site setting (#12208) 2021-02-25 12:39:15 +10:00
domain_checker.rb FIX: Only block domains at the final destination (#15689) (#15783) 2022-02-03 09:42:06 +08:00
engine.rb FIX: origins_to_regexes should always return an array (#15589) 2022-01-17 12:48:41 -05:00
file_type_finder.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
helpers.rb SECURITY: Expand and improve SSRF Protections (stable) (#18816) 2022-11-01 16:34:12 +00:00
layout_support.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
layout.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
matcher.rb FEATURE: Onebox can match engines based on the content_type (#13876) 2021-07-30 13:36:30 -04:00
oembed.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
open_graph.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
preview.rb FIX: return an empty result if response from Amazon is missing expected attributes (#13173) 2021-06-01 16:23:18 -04:00
sanitize_config.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
status_check.rb SECURITY: Expand and improve SSRF Protections (stable) (#18816) 2022-11-01 16:34:12 +00:00
template_support.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30
view.rb DEV: Absorb onebox gem into core (#12979) 2021-05-26 15:11:35 +05:30