osr-discourse-src

auth

FIX: Logout could fail due to cached user

2022-07-04 17:01:45 +02:00

autospec

DEV: Support for running theme test with Ember CLI (third attempt)

2022-01-13 16:02:07 -05:00

backup_restore

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

common_passwords

…

compression

SECURITY: Prevent arbitrary file write when decompressing files (stable) (#18423 )

2022-09-29 20:07:58 +02:00

content_security_policy

FIX: Set CSP base-uri to self (#13654 )

2021-07-07 09:43:48 -04:00

demon

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

discourse_dev

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

email

SECURITY: BCC active user emails from group SMTP (#19724 )

2023-01-05 08:50:54 +08:00

emoji

FEATURE: Add missing emojis (#15582 )

2022-01-14 17:51:13 -03:00

faker

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

file_store

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

final_destination

SECURITY: Expand and improve SSRF Protections (stable) (#18816 )

2022-11-01 16:34:12 +00:00

freedom_patches

FEATURE: RS512, RS384 and RS256 COSE algorithms (#15868 )

2022-02-09 13:56:45 +02:00

generators/rails

DEV: removes plugin generator (#14101 )

2021-08-20 11:29:06 +02:00

guardian

SECURITY: Restrict unlisted topic creation (#19258 )

2022-12-02 15:55:17 +00:00

highlight_js

…

i18n

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

imap

FIX: Add random suffix to outbound Message-ID for email (#15179 )

2021-12-06 10:34:39 +10:00

import

…

import_export

FEATURE: include user custom fields in base exporter (#14690 )

2021-10-22 10:02:56 -07:00

javascripts

DEV: Allow transformed values to be used in all widget hbs statements (#13331 )

2021-06-08 16:46:07 +01:00

middleware

SECURITY: Ensure user-agent-based responses are cached separately (stable) (#16476 )

2022-04-14 14:26:00 +01:00

migration

DEV: Promote old post-deploy migrations to pre-deploy migrations (#13477 )

2021-06-22 16:02:24 +01:00

onebox

SECURITY: Expand and improve SSRF Protections (stable) (#18816 )

2022-11-01 16:34:12 +00:00

plugin

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

pretty_text

DEV: replaces huge generated emoji list by a simpler regex (#11053 )

2021-04-22 08:43:06 +02:00

rate_limiter

FEATURE: Apply rate limits per user instead of IP for trusted users (#14706 )

2021-11-17 23:27:30 +03:00

reviewable

DEV: APIs for plugin to add custom reviewable confirm modal (#12246 )

2021-03-02 10:28:27 -06:00

scheduler

…

search

FIX: remove superfluous spaces from CJK blurbs (#12629 )

2021-04-12 12:46:42 +10:00

seed_data

FIX: Support Ruby 3 keyword arguments

2021-10-05 11:25:00 -04:00

sidekiq

…

site_settings

DEV: Drop env-based SiteSetting deprecation errors (#15273 )

2021-12-13 17:36:29 +01:00

stylesheet

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

svg_sprite

DEV: Remove a few unused icons (#14696 )

2021-10-22 12:03:58 -04:00

tasks

PERF: Update s3:expire_missing_assets to delete in batches (#18908 )

2022-11-17 14:17:45 +00:00

theme_store

FIX: Update GitImporter to match main (#18974 )

2022-11-14 12:28:00 -06:00

topic_query

FIX: exclude topics from muted tag in category featured list. (#14925 )

2021-11-16 12:10:50 +05:30

turbo_tests

FIX: Make thumbnail tests start with a clean slate (#15216 )

2021-12-07 13:07:45 -06:00

validators

SECURITY: Check the length of raw post body (#19734 )

2023-01-05 08:51:21 +08:00

webauthn

…

wizard

FEATURE: Enable auto dark mode on new instances (#14208 )

2021-09-02 14:55:38 -04:00

admin_confirmation.rb

…

admin_constraint.rb

FEATURE: Apply rate limits per user instead of IP for trusted users (#14706 )

2021-11-17 23:27:30 +03:00

admin_user_index_query.rb

DEV: Let's always give a drop_from param to deprecate (#14901 )

2021-11-12 08:52:59 -06:00

age_words.rb

…

archetype.rb

…

auth.rb

FEATURE: Experimental support for group membership via google auth (#14835 )

2021-12-09 12:30:27 +00:00

backup_restore.rb

DEV: Upgrade Rails to 6.1.3.1 (#12688 )

2021-04-21 12:36:32 +03:00

badge_posts_view_manager.rb

…

badge_queries.rb

FIX: Don't grant sharing badges to users who don't exist (#13851 )

2021-07-27 16:32:59 +10:00

base62.rb

DEV: Correct typos and spelling mistakes (#12812 )

2021-05-21 11:43:47 +10:00

bookmark_manager.rb

DEV: Drop old bookmark columns (#15405 )

2022-01-04 11:19:27 +10:00

bookmark_query.rb

FEATURE: Go to last unread for topic-level bookmark links (#14396 )

2021-09-21 13:49:56 +10:00

bookmark_reminder_notification_handler.rb

DEV: Ignore reminder_type for bookmarks (#14349 )

2021-09-16 09:56:54 +10:00

browser_detection.rb

…

cache.rb

DEV: Fix rubocop issues (#14715 )

2021-10-27 11:39:28 +03:00

canonical_url.rb

FEATURE: Send a 'noindex' header in non-canonical responses (#15026 )

2021-11-25 16:58:39 -03:00

category_badge.rb

…

chrome_installed_checker.rb

DEV: Move chrome binary check into a shared lib (#13451 )

2021-06-21 13:28:48 +10:00

comment_migration.rb

…

composer_messages_finder.rb

FEATURE: Make allow_uploaded_avatars accept TL (#14091 )

2021-08-24 10:46:28 +03:00

configurable_urls.rb

…

content_buffer.rb

…

content_security_policy.rb

PERF: Eager load Theme associations in Stylesheet Manager.

2021-06-21 11:06:58 +08:00

cooked_post_processor.rb

DEV: Remove xlink hrefs (#15059 )

2021-11-25 15:22:43 +11:00

cooked_processor_mixin.rb

DEV: Remove xlink hrefs (#15059 )

2021-11-25 15:22:43 +11:00

crawler_detection.rb

FEATURE: Implement browser update in crawler view (#12448 )

2021-03-22 19:41:42 +02:00

csrf_token_verifier.rb

…

current_user.rb

…

custom_renderer.rb

…

custom_setting_providers.rb

…

db_helper.rb

DEV: Upgrade Rails to 6.1.3.1 (#12688 )

2021-04-21 12:36:32 +03:00

directory_helper.rb

…

discourse_connect_base.rb

DEV: rename single_sign_on classes to discourse_connect (#15332 )

2022-01-06 16:28:46 +04:00

discourse_connect_provider.rb

DEV: rename single_sign_on classes to discourse_connect (#15332 )

2022-01-06 16:28:46 +04:00

discourse_cookie_store.rb

…

discourse_dev.rb

DEV: move discourse_dev gem to the core. (#13360 )

2021-06-14 20:34:44 +05:30

discourse_diff.rb

Escape values of HTML attributes

2021-08-10 10:25:15 -04:00

discourse_event.rb

DEV: Remove site_setting_saved event (#15164 )

2021-12-02 09:33:03 -06:00

discourse_hub.rb

…

discourse_ip_info.rb

…

discourse_js_processor.rb

DEV: Add support for class properties in babel (#13189 )

2021-05-27 16:13:14 -04:00

discourse_logstash_logger.rb

…

discourse_plugin_registry.rb

REFACTOR: Improve support for consolidating notifications. (#14904 )

2021-11-30 13:36:14 -03:00

discourse_redis.rb

PERF: Redis snapshotting during tests (#15260 )

2021-12-10 14:25:26 -06:00

discourse_tagging.rb

FIX: When filtering tags for visibility, respect tag group permissions (#19152 )

2022-11-29 10:36:02 -06:00

discourse_updates.rb

FIX: Regression introduced in #14715 (#14842 )

2021-11-09 17:20:09 +11:00

discourse.rb

DEV: Don't warn on missing git tags (#15507 )

2022-01-09 20:25:58 +01:00

disk_space.rb

…

distributed_cache.rb

FIX: Handle nil values in DistributedCache#defer_get_set (stable) (#15980 )

2022-02-18 08:51:14 +00:00

distributed_memoizer.rb

…

distributed_mutex.rb

…

edit_rate_limiter.rb

FEATURE: Increase daily edit limits proportionally to trust level (#13090 )

2021-05-19 13:57:21 +04:00

email_backup_token.rb

…

email_cook.rb

PERF: Avoid lookbehinds when replacing links in imported emails (#11931 )

2021-02-02 17:34:00 +01:00

email_updater.rb

DEV: Hash tokens stored from email_tokens (#14493 )

2021-11-25 09:34:39 +02:00

email.rb

FIX: Add random suffix to outbound Message-ID for email (#15179 )

2021-12-06 10:34:39 +10:00

encodings.rb

…

enum_site_setting.rb

…

enum.rb

…

excerpt_parser.rb

DEV: Remove dead code

2021-05-31 10:22:50 +08:00

external_upload_helpers.rb

DEV: Extract shared external upload routes into controller helper (#14984 )

2021-11-18 09:17:23 +10:00

feed_element_installer.rb

…

feed_item_accessor.rb

FIX: Select best link from Atom feed (#15663 )

2022-01-21 17:54:18 +02:00

file_helper.rb

DEV: Swap out optipng with oxipng (#15013 )

2021-11-22 10:16:35 -07:00

filter_best_posts.rb

…

final_destination.rb

SECURITY: Expand and improve SSRF Protections (stable) (#18816 )

2022-11-01 16:34:12 +00:00

flag_query.rb

DEV: Remove deprecated methods (#14885 )

2021-11-11 12:21:25 -06:00

flag_settings.rb

…

gaps.rb

…

git_url.rb

SECURITY: Expand and improve SSRF Protections (stable) (#18816 )

2022-11-01 16:34:12 +00:00

global_path.rb

…

group_email_credentials_check.rb

FEATURE: Scheduled group email credential problem check (#15396 )

2022-01-04 10:14:33 +10:00

guardian.rb

DEV: Introduce TopicGuardian#can_see_topic_ids method (#18692 ) (#18765 )

2022-10-27 07:46:28 +08:00

has_errors.rb

…

hijack.rb

…

homepage_constraint.rb

FEATURE: Apply rate limits per user instead of IP for trusted users (#14706 )

2021-11-17 23:27:30 +03:00

html_prettify.rb

…

html_to_markdown.rb

FIX: Hoisting linebreaks shouldn't fail for HTML5 elements (#14364 )

2021-09-17 10:41:34 +02:00

http_language_parser.rb

…

image_sizer.rb

…

import_export.rb

…

inline_oneboxer.rb

FIX: Only block domains at the final destination (#15689 ) (#15783 )

2022-02-03 09:42:06 +08:00

introduction_updater.rb

…

js_locale_helper.rb

FIX: Translation overrides from fallback locale didn't work on client

2021-12-17 14:03:35 +01:00

json_error.rb

…

letter_avatar.rb

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

markdown_linker.rb

…

mem_info.rb

…

message_bus_diags.rb

…

method_profiler.rb

DEV: Add output_sql_to_stderr! to MethodProfiler (#12445 )

2021-03-19 17:48:30 +10:00

mini_sql_multisite_connection.rb

DEV: upgrade mini_sql (#12465 )

2021-03-24 08:48:04 +11:00

mobile_detection.rb

…

new_post_manager.rb

SECURITY: Escape watched word in error message (#14434 )

2021-09-24 11:55:15 +03:00

new_post_result.rb

DEV: Let's always give a drop_from param to deprecate (#14901 )

2021-11-12 08:52:59 -06:00

notification_levels.rb

…

onebox.rb

DEV: Absorb onebox gem into core (#12979 )

2021-05-26 15:11:35 +05:30

oneboxer.rb

FIX: Only block domains at the final destination (#15689 ) (#15783 )

2022-02-03 09:42:06 +08:00

onpdiff.rb

…

pbkdf2.rb

DEV: Correct typos and spelling mistakes (#12812 )

2021-05-21 11:43:47 +10:00

permalink_constraint.rb

…

pinned_check.rb

…

plain_text_to_markdown.rb

…

plugin_gem.rb

DEV: Don't load bundler when installing plugin gem. (#16176 )

2022-03-18 11:27:20 +08:00

plugin_initialization_guard.rb

…

post_action_creator.rb

DEV: Create post actions without creating a notification and store custom data. (#15397 )

2021-12-27 11:25:37 -03:00

post_action_destroyer.rb

…

post_action_result.rb

…

post_creator.rb

SECURITY: use rstrip instead of regex gsub to prevent ReDOS (#19738 )

2023-01-05 08:51:33 +08:00

post_destroyer.rb

FIX: Clean flagged queue when response to flagged post deleted (#15463 )

2022-01-05 12:37:15 -06:00

post_jobs_enqueuer.rb

FIX: Do not send emails to mailing_list_mode subscribers for PMs (#14159 )

2021-08-26 15:16:35 +10:00

post_locker.rb

…

post_merger.rb

FEATURE: TL4 & category moderators can merge posts (#12843 )

2021-04-27 18:24:27 +02:00

post_revisor.rb

SECURITY: use rstrip instead of regex gsub to prevent ReDOS (#19738 )

2023-01-05 08:51:33 +08:00

presence_channel.rb

DEV: Fix deprecation warning after updating to messabe_bus 4.0.0.

2022-01-13 14:11:07 +08:00

pretty_text.rb

FIX: Improve top links section from user summary (#15675 )

2022-01-24 11:33:23 +11:00

promotion.rb

FIX: check if BasicBadge is enabled for TL1 welcome message (#13983 )

2021-08-11 08:39:25 +10:00

quote_comparer.rb

…

rake_helpers.rb

…

rate_limiter.rb

FEATURE: Apply rate limits per user instead of IP for trusted users (#14706 )

2021-11-17 23:27:30 +03:00

read_only_header.rb

…

redis_snapshot.rb

PERF: Redis snapshotting during tests (#15260 )

2021-12-10 14:25:26 -06:00

retrieve_title.rb

FIX: Only block domains at the final destination (#15689 ) (#15783 )

2022-02-03 09:42:06 +08:00

route_format.rb

…

route_matcher.rb

FIX: Incorrect currentUser could be cached for requests with API key (#17279 )

2022-07-04 17:01:45 +02:00

rtl.rb

…

s3_cors_rulesets.rb

DEV: Skip logging in test environment (#14971 )

2021-11-16 18:01:48 +03:00

s3_helper.rb

PERF: Update s3:expire_missing_assets to delete in batches (#18908 )

2022-11-17 14:17:45 +00:00

s3_inventory.rb

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

score_calculator.rb

…

screening_model.rb

…

search.rb

SECURITY: Advanced group search did not respect visiblity of groups.

2022-01-10 13:49:26 +08:00

secure_session.rb

…

shrink_uploaded_image.rb

DEV: Improve script/downsize_uploads.rb (#13508 )

2021-06-24 00:09:40 +02:00

site_icon_manager.rb

PERF: Defer setting of distributed cache in more spots.

2021-06-04 09:13:18 +08:00

site_setting_extension.rb

DEV: Don't clear cache/trigger events if site setting hasn't changed (#15045 )

2021-11-22 16:43:12 +01:00

slug.rb

FIX: Make category slugs lowercase (#11277 )

2021-01-12 17:28:33 +02:00

socket_server.rb

…

spam_handler.rb

…

sql_builder.rb

DEV: Let's always give a drop_from param to deprecate (#14901 )

2021-11-12 08:52:59 -06:00

staff_constraint.rb

FEATURE: Apply rate limits per user instead of IP for trusted users (#14706 )

2021-11-17 23:27:30 +03:00

staff_message_format.rb

…

suggested_topics_builder.rb

…

system_message.rb

DEV: Add option to send system message to groups (#12256 )

2021-03-02 18:51:50 +01:00

temporary_db.rb

DEV: Fix methods removed in Ruby 3.2 (#15459 )

2022-01-05 18:45:08 +01:00

temporary_redis.rb

DEV: Introduce TemporaryRedis and unset DISCOURSE_* env vars in the themes:isolated_test rake task (#13401 )

2021-06-23 07:38:43 +03:00

text_cleaner.rb

FEATURE: Correctly convert topic title to uppercase and lowercase for Turkish default locale (#13115 )

2021-05-24 18:13:30 +10:00

text_sentinel.rb

DEV: Correct typos and spelling mistakes (#12812 )

2021-05-21 11:43:47 +10:00

theme_javascript_compiler.rb

FEATURE: Allow theme tests to be run in production (take 2) (#12845 )

2021-04-28 23:12:08 +03:00

theme_modifier_helper.rb

Code review comments.

2021-06-21 11:06:58 +08:00

theme_settings_manager.rb

FEATURE: Allow theme settings to request refresh (#15037 )

2021-11-22 13:16:56 +01:00

theme_settings_parser.rb

FEATURE: Allow theme settings to request refresh (#15037 )

2021-11-22 13:16:56 +01:00

theme_translation_manager.rb

…

theme_translation_parser.rb

…

timeline_lookup.rb

FIX: ensures timeline_lookup includes last tuple (#11829 )

2021-01-25 11:30:59 +01:00

topic_creator.rb

SECURITY: Restrict unlisted topic creation (#19258 )

2022-12-02 15:55:17 +00:00

topic_list_responder.rb

…

topic_publisher.rb

…

topic_query_params.rb

FIX: Build correct topic list filter (#11473 )

2020-12-11 14:20:48 +02:00

topic_query.rb

FIX: exclude topics from muted tag in category featured list. (#14925 )

2021-11-16 12:10:50 +05:30

topic_retriever.rb

FEATURE: Fallback to system users when creating new TopicEmbed (#12386 )

2021-03-15 11:58:53 -03:00

topic_subtype.rb

…

topic_upload_security_manager.rb

DEV: Add security_last_changed_at and security_last_changed_reason to uploads (#11860 )

2021-01-29 09:03:44 +10:00

topic_view.rb

FIX: Display pending posts in a moderated category

2021-12-07 10:14:45 +01:00

topics_bulk_action.rb

FIX: Don't publish PM archive events to acting user. (#14291 )

2021-09-10 09:20:50 +08:00

trust_level.rb

FIX: Don't store translated trust level names in anonymous cache (#13224 )

2021-06-01 22:11:48 +02:00

turbo_tests.rb

FIX: Make thumbnail tests start with a clean slate (#15216 )

2021-12-07 13:07:45 -06:00

twitter_api.rb

…

unicorn_logstash_patch.rb

…

unread.rb

FEATURE: Add last visit indication to topic view page. (#13471 )

2021-07-05 14:17:31 +08:00

upload_creator.rb

FIX: Blurry onebox favicon images (#15258 )

2021-12-10 12:25:50 -07:00

upload_fixer.rb

…

upload_markdown.rb

…

upload_recovery.rb

FIX: Support Ruby 3 keyword arguments

2021-10-05 11:25:00 -04:00

upload_security.rb

FIX: Do not mark badge image uploads as secure (#13193 )

2021-05-28 12:35:52 +10:00

url_helper.rb

FEATURE: revert disallowing putting URLs in titles for TL0 users (#13970 )

2021-08-06 20:07:42 +04:00

user_lookup.rb

REVERT "FIX: do not show private group flair on user avatars" (#13991 )

2021-08-10 17:25:11 +05:30

user_name_suggester.rb

FEATURE: when suggesting usernames skip input that consist entirely of disallowed characters (#15368 )

2021-12-21 21:13:05 +04:00

vary_header.rb

FIX: Include the Vary:Accept header on all Accept-based responses (#14647 )

2021-10-25 12:53:50 +01:00

version.rb

Version bump to v2.8.13 (#19244 )

2022-11-29 11:12:55 -06:00

webauthn.rb

FEATURE: RS512, RS384 and RS256 COSE algorithms (#15868 )

2022-02-09 13:56:45 +02:00

wizard.rb

…

zeitwerk_config.rb

SECURITY: Expand and improve SSRF Protections (stable) (#18816 )

2022-11-01 16:34:12 +00:00