This repository has been archived on 2023-03-18. You can view files and clone it, but cannot push or open issues or pull requests.
osr-discourse-src/plugins/chat/app/models
Natalie Tay 5eaf080239
SECURITY: Limit chat drafts length and preloaded count (#19987)
Only allow maximum of `50_000` characters for chat drafts. A hidden `max_chat_draft_length` setting can control this limit. A migration is also provided to delete any abusive draft in the database.

The number of drafts loaded on current user has also been limited and ordered by most recent update.

Note that spec files moved are not directly related to the fix.

Co-authored-by: Joffrey JAFFEUX <j.jaffeux@gmail.com>
Co-authored-by: Régis Hanol <regis@hanol.fr>
2023-01-25 13:50:10 +02:00
..
concerns DEV: Rename direct message related models 2022-11-03 14:39:23 +01:00
category_channel.rb FIX: Do not error if autogenerated channel slug is blank (#19759) 2023-01-06 09:04:52 +10:00
chat_channel_archive.rb FIX: Improve error reporting and failure modes for channel archiving (#19791) 2023-01-12 10:04:46 +10:00
chat_channel.rb DEV: Apply syntax_tree formatting to plugins/* 2023-01-07 11:11:37 +00:00
chat_draft.rb SECURITY: Limit chat drafts length and preloaded count (#19987) 2023-01-25 13:50:10 +02:00
chat_mention.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00
chat_message_reaction.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00
chat_message_revision.rb FIX: Make chat editor IDs not null (#18903) 2022-11-08 09:06:13 +10:00
chat_message.rb DEV: Use UploadReference instead of ChatUpload in chat (#19947) 2023-01-24 13:28:21 +10:00
chat_upload.rb DEV: Use UploadReference instead of ChatUpload in chat (#19947) 2023-01-24 13:28:21 +10:00
chat_view.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00
chat_webhook_event.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00
deleted_chat_user.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00
direct_message_channel.rb FIX: Automatically generate category channel slugs (#18879) 2022-11-09 10:28:31 +10:00
direct_message_user.rb DEV: Rename direct message related models 2022-11-03 14:39:23 +01:00
direct_message.rb DEV: Rename direct message related models 2022-11-03 14:39:23 +01:00
incoming_chat_webhook.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00
reviewable_chat_message.rb FIX: Unsilence users on chat message flag disagree. (#19198) 2022-11-28 11:11:35 -03:00
user_chat_channel_membership.rb DEV: Move discourse-chat to the core repo. (#18776) 2022-11-02 10:41:30 -03:00