This repository has been archived on 2023-03-18. You can view files and clone it, but cannot push or open issues or pull requests.
osr-discourse-src/app/assets/javascripts/discourse/app
Natalie Tay d5745d34c2
SECURITY: Limit the character count of group membership requests (#19993)
When creating a group membership request, there is no character
limit on the 'reason' field. This can be potentially be used by
an attacker to create enormous amount of data in the database.

Co-authored-by: Ted Johansson <ted@discourse.org>
2023-01-25 13:50:33 +02:00
..
adapters FIX: Avoid duplicate topic-list requests (#18073) 2022-08-24 11:54:01 +01:00
components FIX: Don't display staff-only options to non-staff in group member bulk menu (#19907) 2023-01-20 11:16:04 +08:00
controllers FEATURE: Allow admins to permanently delete revisions (#19913) 2023-01-19 15:09:01 -06:00
helpers DEV: Export default category link renderer to be used on plugins and theme-components (#19455) 2022-12-13 18:41:36 -03:00
initializers DEV: Use message-bus chunked encoding in development (#19878) 2023-01-17 09:54:33 +00:00
lib A11Y: discourse-tags should have a role and label (#19977) 2023-01-24 13:04:32 -05:00
mixins DEV: Remove defunct TODOs (#19825) 2023-01-12 09:41:39 +10:00
models FIX: TL4 user is not redirected to latest when delete topic (#19967) 2023-01-24 11:28:04 +11:00
modifiers DEV: Upgrade Topic Timeline to Glimmer (#17377) 2022-12-01 13:50:44 -06:00
pre-initializers DEV: Clean up all message bus subscriptions (#19268) 2022-12-12 16:32:25 +01:00
raw-views DEV: Use method definition syntax consistently (#14915) 2021-11-13 14:01:55 +01:00
routes A11Y: more descriptive user page titles (#19819) 2023-01-19 12:45:45 -05:00
services FIX: Avoid race conditions when toggling presence state (#19648) 2022-12-29 00:44:31 +00:00
styles DEV: Migrate to Ember CLI (#11932) 2021-02-03 14:22:20 -05:00
templates SECURITY: Limit the character count of group membership requests (#19993) 2023-01-25 13:50:33 +02:00
widgets UX: remove extra whitespace in search helper (#19980) 2023-01-24 15:27:05 -05:00
app.js DEV: Normalize event handling to improve Glimmer + Classic component compat (Take 2) (#18742) 2022-10-26 14:44:12 +01:00
index.html DEV: Add hint about Rails-generated <head> to ember-cli HTML (#19181) 2022-11-24 15:31:10 +00:00
mapping-router.js DEV: Clean up pre-initializers (#18680) 2022-10-26 09:19:54 +08:00