This repository has been archived on 2023-03-18. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Sam Saffron 40ac895ef7 SECURITY: properly validate return URL for SSO ...

Previously carefully crafted URLs could redirect off site

2019-03-25 09:02:42 +11:00

..

admin

FIX: Prevent critical emails bypassing disable, and improve email test logic

2019-03-22 17:28:43 +08:00

about_controller_spec.rb

FIX: title was repeating on about page

2018-11-28 08:06:14 +05:30

application_controller_spec.rb

FEATURE: Enforce two-factor authentication. (#6348)

2019-03-15 13:09:37 +02:00

badges_controller_spec.rb

REFACTOR: about & badge controllers => requests

2018-05-22 13:45:13 +10:00

categories_controller_spec.rb

FIX: Respect permalinks starting with "/category" (#7171)

2019-03-18 10:24:46 -04:00

category_hashtags_controller_spec.rb

REFACTOR: category hashtags controller specs to requests (#5936)

2018-06-07 13:09:23 +08:00

clicks_controller_spec.rb

REFACTOR: clicks controller specs to requests (#5929)

2018-06-07 12:57:29 +08:00

composer_controller_spec.rb

FIX: return 429 when admin api key is limited on admin route

2018-01-12 14:15:26 +11:00

composer_messages_controller_spec.rb

REFACTOR: composer messages controller specs to requests (#5940)

2018-06-07 13:51:52 +08:00

csp_reports_controller_spec.rb

allow CSP reports to be sent when header isn't set by Discourse (#6594)

2018-11-14 16:23:29 -05:00

directory_items_controller_spec.rb

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

draft_controller_spec.rb

FIX: only check for conflict on edit drafts

2018-11-15 13:14:07 +11:00

drafts_controller_spec.rb

cleanup

2018-09-12 13:10:14 -04:00

email_controller_spec.rb

FEATURE: add more granular user option levels for email notifications (#7143)

2019-03-15 10:55:11 -04:00

embed_controller_spec.rb

REFACTOR: Move queue_jobs out of SiteSetting

2019-03-14 10:47:38 -04:00

exceptions_controller_spec.rb

FIX: Properly support defaults for upload site settings.

2019-03-13 16:36:57 +08:00

export_csv_controller_spec.rb

FEATURE: do not allow moderators to export user list (#6418)

2018-09-21 09:07:13 +08:00

extra_locales_controller_spec.rb

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

finish_installation_controller_spec.rb

FEATURE: Make initial admins TL1

2018-08-22 15:45:24 +10:00

groups_controller_spec.rb

FIX: user_id handling on remove user from group

2019-01-24 17:40:48 -07:00

inline_onebox_controller_spec.rb

REFACTOR: inline onebox controller specs to requests

2018-06-07 13:11:45 +08:00

invites_controller_spec.rb

REFACTOR: Move queue_jobs out of SiteSetting

2019-03-14 10:47:38 -04:00

list_controller_spec.rb

FEATURE: add short_site_description setting to be included in title tag on homepage

2018-12-12 11:46:58 +01:00

metadata_controller_spec.rb

FEATURE: Setting for short title used by Android on homescreen

2018-11-28 14:59:30 +01:00

notifications_controller_spec.rb

DEV: Fix randomlly failing spec.

2019-01-22 15:19:31 +08:00

offline_controller_spec.rb

REFACTOR: offline controller spec to requests (#5943)

2018-06-07 12:24:05 +08:00

omniauth_callbacks_controller_spec.rb

FIX: don't redirect incorrectly after full screen login (#7170)

2019-03-19 12:39:13 +00:00

onebox_controller_spec.rb

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

permalinks_controller_spec.rb

REFACTOR: permalinks controller specs to requests (#5934)

2018-06-07 13:08:13 +08:00

post_action_users_controller_spec.rb

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

post_actions_controller_spec.rb

FIX: Properly display error when post action fails to create.

2018-06-20 21:20:23 +08:00

posts_controller_spec.rb

REFACTOR: Move queue_jobs out of SiteSetting

2019-03-14 10:47:38 -04:00

push_notification_controller_spec.rb

Refactor of PushSubscriptionPusher.

2018-05-09 08:14:14 +08:00

queued_posts_controller_spec.rb

FIX: allow staff to remove tags from queued topics

2018-06-26 17:08:40 +05:30

robots_txt_controller_spec.rb

FEATURE: add Noindex to robots.txt for disallowed routes

2018-11-02 16:39:47 +11:00

safe_mode_controller_spec.rb

Allow staff members to enable safe mode, even if disabled

2018-04-25 11:49:57 -04:00

search_controller_spec.rb

FIX: raises an error if q param is empty in search page

2018-12-20 21:43:14 +05:30

session_controller_spec.rb

SECURITY: properly validate return URL for SSO

2019-03-25 09:02:42 +11:00

similar_topics_controller_spec.rb

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

site_controller_spec.rb

FEATURE: Upload Site Settings. (#6573)

2018-11-14 15:03:02 +08:00

static_controller_spec.rb

FIX: StaticController#favicon reads from disk when using local store. (#7160)

2019-03-14 04:17:36 +08:00

steps_controller_spec.rb

DEV: Assert for 200 response code to avoid changing magic helper in the future.

2018-06-07 16:11:09 +08:00

stylesheets_controller_spec.rb

FEATURE: backend support for user-selectable components

2018-08-08 14:46:34 +10:00

svg_sprite_controller_spec.rb

FEATURE: support custom icons in themes (#7155)

2019-03-15 17:16:15 +11:00

tag_groups_controller_spec.rb

DEV: Basic specs for TagGroupsController.

2018-09-18 08:22:03 +08:00

tags_controller_spec.rb

FIX: Disable 'Create Topic' button if tag is staff-only. (#6984)

2019-03-12 19:23:36 +11:00

theme_javascripts_controller_spec.rb

PERF: include content-length header for CDN

2019-02-22 11:21:07 +11:00

topics_controller_spec.rb

FIX: ensures tag-groups are used to allow category edit on topics (#7141)

2019-03-11 15:02:27 +01:00

uploads_controller_spec.rb

UX: Lightbox support for image uploader. (#7034)

2019-02-21 10:13:37 +08:00

user_actions_controller_spec.rb

FEATURE: Consolidate likes notifications. (#6879)

2019-01-16 10:40:16 +08:00

user_api_keys_controller_spec.rb

FEATURE: Allow wildcard in allowed_user_api_auth_redirects setting (#6779)

2019-02-26 17:03:20 +01:00

user_avatars_controller_spec.rb

REFACTOR: Proxy letter avatars in rails instead of nginx

2019-02-18 08:46:56 +11:00

user_badges_controller_spec.rb

FIX: use discourse route_for function to check url route

2019-01-11 14:58:45 +08:00

users_controller_spec.rb

FEATURE: Only allow TL2 Users to ignore other users (#7212)

2019-03-20 15:02:33 +01:00

users_email_controller_spec.rb

FEATURE: improve API error reporting for invalid records

2018-08-21 11:54:34 +10:00

webhooks_controller_spec.rb

FIX: new mailgun webhooks

2019-01-31 17:52:33 +01:00

wizard_controller_spec.rb

Merge branch 'wizard-controller' of https://github.com/OsamaSayegh/discourse into OsamaSayegh-wizard-controller

2018-06-07 12:27:48 +08:00