This repository has been archived on 2023-03-18. You can view files and clone it. You cannot open issues or pull requests or push a commit.

David Taylor f95609ae23 FIX: Add additional checks for automatic theme script CSP ...

- Skip absolute URLs
- Skip CDN URLs
- Skip invalid URLs
- Properly format protocol-less URLs

2020-04-27 15:56:29 +01:00

..

backup_restore

DEV: Add rubocop-rspec (#9288)

2020-03-27 17:35:40 +01:00

compression

DEV: Split max decompressed setting for themes and backups (#8179)

2019-10-11 14:38:10 -03:00

content_security_policy

FIX: Allow CSP to work correctly for non-default hostnames/schemes (#9180)

2020-03-19 19:54:42 +00:00

i18n

FIX: English locale must not fall back to any other locale

2019-06-07 21:53:01 +02:00

seed_data

DEV: Add rubocop-rspec (#9288)

2020-03-27 17:35:40 +01:00

site_settings

Revert "Revert "FIX: Don't allow people to clear the upload bucket while it's enabled""

2020-03-06 09:35:55 -05:00

validators

FEATURE: Add timezone to core user_options (#8380)

2019-11-25 10:49:27 +10:00

webauthn

SECURITY: 2FA with U2F / TOTP

2020-01-15 11:27:12 +01:00

bookmark_manager_spec.rb

FIX: Make sure reminder_type is parsed on bookmark update (#9503)

2020-04-22 10:44:04 +10:00

bookmark_query_spec.rb

SECURITY: Respect topic permissions when loading bookmark metadata

2020-03-23 11:30:48 +00:00

bookmark_reminder_notification_handler_spec.rb

FEATURE: Promote bookmarks with reminders to core functionality (#9369)

2020-04-22 13:44:19 +10:00

browser_detection_spec.rb

FIX: Detect DiscourseHub user agent.

2019-08-09 11:58:15 +03:00

content_security_policy_spec.rb

FIX: Add additional checks for automatic theme script CSP

2020-04-27 15:56:29 +01:00

db_helper_spec.rb

DEV: Upgrading Discourse to Zeitwerk (#8098)

2019-10-02 14:01:53 +10:00

discourse_js_processor_spec.rb

Support for transpiling .js files (#9160)

2020-03-11 09:43:55 -04:00

encodings_spec.rb

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

introduction_updater_spec.rb

FIX: replace default welcome topic post with new value from wizard

2020-04-01 15:42:45 -04:00

mini_sql_multisite_connection_spec.rb

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

search_spec.rb

FIX: skip invalid URLs when checking for audio/video in search blurbs

2019-11-06 10:32:15 -05:00

theme_flag_modifier_spec.rb

FEATURE: Allow themes to specify modifiers in their about.json file (#9097)

2020-03-11 13:30:45 +00:00

theme_javascript_compiler_spec.rb

DEV: Test theme js compiler append_raw_template (#8950)

2020-03-06 11:35:52 -05:00

topic_upload_security_manager_spec.rb

DEV: Add rubocop-rspec (#9288)

2020-03-27 17:35:40 +01:00

upload_creator_spec.rb

FIX: Change secure media to encompass attachments as well (#9271)

2020-03-26 07:16:02 +10:00

upload_recovery_spec.rb

DEV: disable all upload recovery specs

2019-11-11 16:04:18 +11:00

upload_security_spec.rb

FIX: Change secure media to encompass attachments as well (#9271)

2020-03-26 07:16:02 +10:00