This repository has been archived on 2023-03-18. You can view files and clone it, but cannot push or open issues or pull requests.
osr-discourse-src/app
David Taylor 010309d108
SECURITY: Improve validation of SNS subscription confirm (#14671)
An upstream validation bug in the aws-sdk-sns library could enable RCE under certain circumstances. This commit updates the upstream gem, and adds additional validation to provide defense-in-depth.
2021-10-20 22:20:52 +01:00
..
assets FIX: Show search context only in topic routes (#14650) 2021-10-20 09:48:26 -04:00
controllers FEATURE: Change all core to use uppy-image-uploader (#14428) 2021-10-19 13:25:42 +10:00
helpers DEV: Allow actions to change the manifest endpoint (#14522) 2021-10-06 15:41:52 -05:00
jobs SECURITY: Improve validation of SNS subscription confirm (#14671) 2021-10-20 22:20:52 +01:00
mailers FIX: Do not show recipient user in email participants list (#14642) 2021-10-19 15:26:22 +10:00
models FIX: Make the verbose_auth_token_logging setting off by default (#14664) 2021-10-20 17:20:39 +03:00
serializers DEV: Remove TopicView#first_post_id. (#14631) 2021-10-18 14:47:47 +08:00
services FEATURE: Change all core to use uppy-image-uploader (#14428) 2021-10-19 13:25:42 +10:00
views FIX: improvements for download local dates (#14588) 2021-10-14 09:22:44 +11:00