This repository has been archived on 2023-03-18. You can view files and clone it, but cannot push or open issues or pull requests.
osr-discourse-src/app/assets/javascripts/discourse/tests
Alan Guo Xiang Tan 42d2cb2d4e
SECURITY: Hide PM count for tags by default (#20061) (#20090)
Currently `Topic#pm_topic_count` is a count of all personal messages tagged for a given tag. As a result, any user with access to PM tags can poll a sensitive tag to determine if a new personal message has been created using that tag even if the user does not have access to the personal message. We classify this as a minor leak in sensitive information.

With this commit, `Topic#pm_topic_count` is hidden from users by default unless the `display_personal_messages_tag_counts` site setting is enabled.
2023-02-01 06:43:58 +08:00
..
acceptance FIX: Don't display staff-only options to non-staff in group member bulk menu (#19907) 2023-01-25 13:48:49 +02:00
addons/truth-helpers/integration/helpers DEV: adds includes helper to templates (#18259) 2022-09-15 14:20:37 +02:00
fixtures DEV: Remove user options from current user serializer (#19089) 2022-12-05 18:25:30 +02:00
helpers SECURITY: Hide PM count for tags by default (#20061) (#20090) 2023-02-01 06:43:58 +08:00
integration SECURITY: Hide PM count for tags by default (#20061) (#20090) 2023-02-01 06:43:58 +08:00
unit SECURITY: Hide PM count for tags by default (#20061) (#20090) 2023-02-01 06:43:58 +08:00
index.html DEV: Update Twitter meta tags while navigating in app (#19468) 2022-12-14 14:33:09 -05:00
setup-tests.js DEV: Drop helper context setup in tests (#19423) 2022-12-12 15:20:48 +01:00
test-boot-ember-cli.js DEV: Make the setupTests a regular import (#19046) 2022-11-16 16:11:18 +08:00