This repository has been archived on 2023-03-18. You can view files and clone it, but cannot push or open issues or pull requests.

Alan Guo Xiang Tan 42d2cb2d4e SECURITY: Hide PM count for tags by default (#20061) (#20090) ... Currently `Topic#pm_topic_count` is a count of all personal messages tagged for a given tag. As a result, any user with access to PM tags can poll a sensitive tag to determine if a new personal message has been created using that tag even if the user does not have access to the personal message. We classify this as a minor leak in sensitive information. With this commit, `Topic#pm_topic_count` is hidden from users by default unless the `display_personal_messages_tag_counts` site setting is enabled.		2023-02-01 06:43:58 +08:00
..
app	SECURITY: Hide PM count for tags by default (#20061) (#20090)	2023-02-01 06:43:58 +08:00
config	DEV: Remove deprecation config for ember-modifier (#19439)	2022-12-13 10:28:44 +00:00
lib	DEV: Add dark theme support to QUnit (#19014)	2022-11-17 18:44:44 +01:00
public/assets/scripts	DEV: Enable @cached decorator for themes and plugins (#19261)	2022-11-30 15:53:54 +00:00
scripts	DEV: Compile splash screen JS with ember-cli before inlining (#18150)	2022-09-01 09:58:48 +01:00
tests	SECURITY: Hide PM count for tags by default (#20061) (#20090)	2023-02-01 06:43:58 +08:00
.ember-cli	REFACTOR: Sync up master with changes for Ember-CLI (#11671)	2021-01-12 10:13:21 -05:00
.npmrc	DEV: Prevent npm usage (#13945)	2021-08-04 22:04:58 +02:00
ember-cli-build.js	DEV: Move the recently added dev-deps to deps (#19103)	2022-11-18 11:45:52 +01:00
jsconfig.json	DEV: Add discourse/tests to jsconfig (#19031)	2022-11-15 11:33:56 +00:00
package.json	Build(deps): Bump jsdom from 20.0.3 to 21.0.0 in /app/assets/javascripts (#19786)	2023-01-08 23:41:14 +01:00
testem.js	DEV: Move shouldLoadPluginTestJs() (#19045)	2022-11-16 11:07:58 +01:00