This repository has been archived on 2023-03-18. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Alan Guo Xiang Tan 0f7b9878ff SECURITY: Category group permissions leaked to normal users. ...

After this commit, category group permissions can only be seen by users
that are allowed to manage a category. In the past, we inadvertently
included a category's group permissions settings in `CategoriesController#show`
and `CategoriesController#find_by_slug` endpoints for normal users when
those settings are only a concern to users that can manage a category.

2022-04-08 13:46:20 +08:00

..

admin

DEV: Fix select-kit deprecations (#15080)

2022-04-05 19:01:09 +02:00

confirm-new-email

…

discourse

SECURITY: Category group permissions leaked to normal users.

2022-04-08 13:46:20 +08:00

discourse-common

DEV: Replace deprecated String.prototype.substr() (#16233)

2022-04-01 17:35:17 +02:00

discourse-hbr

PERF: Update ember-auto-import and webpack (#15919)

2022-02-14 11:21:39 +00:00

discourse-widget-hbs

PERF: Update ember-auto-import and webpack (#15919)

2022-02-14 11:21:39 +00:00

docs

…

ember-addons

…

locales

DEV: Replace deprecated String.prototype.substr() (#16233)

2022-04-01 17:35:17 +02:00

pretty-text

DEV: Update xss.js package (#16398)

2022-04-06 22:49:13 +02:00

select-kit

FEATURE: Allow multiple required tag groups for a category (#16381)

2022-04-06 14:08:06 +01:00

truth-helpers

PERF: Update ember-auto-import and webpack (#15919)

2022-02-14 11:21:39 +00:00

wizard

DEV: Replace deprecated String.prototype.substr() (#16233)

2022-04-01 17:35:17 +02:00

.npmrc

…

activate-account.js

…

admin-plugins.js.erb

FIX: When using Ember CLI, plugin admin code was not being loaded in tests (#16239)

2022-03-21 15:46:41 -04:00

admin.js

FIX: When using Ember CLI, plugin admin code was not being loaded in tests (#16239)

2022-03-21 15:46:41 -04:00

app-boot.js

DEV: Disallow Ember global usage (#16147)

2022-03-09 17:54:07 +01:00

application.js

…

auto-redirect.js

…

browser-detect.js

DEV: Add polyfill for String.prototype.replaceAll (#16301)

2022-03-28 17:18:56 +01:00

browser-update.js

UX: Make header/footer HTML consistent for crawler and noscript

2022-04-07 15:27:06 +01:00

discourse-loader.js

FIX: Ember test imports, again (#16203)

2022-03-16 17:12:15 +01:00

discourse-shims.js

…

embed-application.js

…

ember_include.js.erb

DEV: Support for running theme test with Ember CLI (third attempt)

2022-01-13 16:02:07 -05:00

ember_jquery.js

…

env.js

…

google-tag-manager.js

…

google-universal-analytics-v3.js

…

google-universal-analytics-v4.js

…

handlebars-shim.js

…

main_include_admin.js

DEV: Remove old backup uploader and resumable.js (#15365)

2021-12-21 15:02:10 +10:00

markdown-it-bundle.js

…

onpopstate-handler.js

…

package.json

…

polyfills.js

DEV: Add polyfill for String.prototype.replaceAll (#16301)

2022-03-28 17:18:56 +01:00

pretty-text-bundle.js

DEV: Remove deprecated pretty-text functions/file (#16397)

2022-04-06 22:48:50 +02:00

print-page.js

…

service-worker.js.erb

FIX: Disable service worker proxying in chrome 97-97.0.4692 (#15638)

2022-01-18 19:41:25 +00:00

set-prototype-polyfill.js

…

start-discourse.js

…

template_include.js

…

test-shims.js

FIX: Ember test imports, again (#16203)

2022-03-16 17:12:15 +01:00

vendor-common.js

DEV: Drop lodash (#16110)

2022-03-06 18:15:25 +01:00

vendor-theme-tests.js

DEV: Support for running theme test with Ember CLI (third attempt)

2022-01-13 16:02:07 -05:00

vendor.js

DEV: Support for running theme test with Ember CLI (third attempt)

2022-01-13 16:02:07 -05:00

widget-runtime.js

…

wizard-application.js

…

wizard-shims.js

…

wizard-start.js

…

wizard-vendor.js

DEV: Remove jQuery UI vendor dependencies (#15700)

2022-01-28 11:21:59 +11:00

yarn.lock

DEV: Update xss.js package (#16398)

2022-04-06 22:49:13 +02:00