This repository has been archived on 2023-03-18. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Dan Ungureanu 554b0f366d SECURITY: Ensure only image uploads can be inlined ...

This prevents malicious files (for example special crafted XMLs) to be
used in XSS attacks.

2019-12-11 17:08:58 +02:00

..

components

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00

fabricators

DEV: Class that converts MD with old attachment links to new MD.

2019-06-04 15:54:25 +08:00

fixtures

FIX: Use correct locale when translating without cache

2019-06-05 14:19:56 +02:00

helpers

replace subfolder on cdn url conversion between general cdn and s3 (#7764)

2019-06-17 11:51:17 -07:00

import_export

DEV: Prefabrication (test optimization) (#7414)

2019-05-07 13:12:20 +10:00

integration

SECURITY: Restrict message-bus access on login_required sites

2019-08-14 10:11:28 +01:00

integrity

DEV: introduces coding style spec (#7615)

2019-05-27 23:38:17 +02:00

jobs

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00

lib

SECURITY: Remove event handlers from SVG files

2019-12-11 17:08:57 +02:00

mailers

SECURITY: Strip HTML from invite emails

2019-07-05 14:58:46 -04:00

models

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00

multisite

FEATURE: Support private attachments when using S3 storage (#7677)

2019-06-06 13:27:24 +10:00

requests

SECURITY: Ensure only image uploads can be inlined

2019-12-11 17:08:58 +02:00

serializers

FIX: Broken spec

2019-06-10 11:50:48 -04:00

services

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00

support

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00

tasks

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00

views/omniauth_callbacks

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

rails_helper.rb

DEV: s/\$redis/Discourse\.redis

2019-12-03 14:26:57 +01:00