Sam 6ff309aa80 SECURITY: don't grant same privileges to user_api and api access ...

User API is no longer gets bypasses that standard API gets.
Only bypasses are CSRF and XHR requirements.

2016-12-16 12:05:43 +11:00

..

components

SECURITY: don't grant same privileges to user_api and api access

2016-12-16 12:05:43 +11:00

controllers

FIX: on 404 from brotli asset path return a correctly encoded doc

2016-12-15 16:05:20 +11:00

fabricators

FEATURE: Add groups page.

2016-12-14 17:27:47 +08:00

fixtures

FIX: wasn't able to parse FROM email in the embedded email

2016-12-01 18:34:47 +01:00

helpers

modernize user agent "is mobile" test strings

2016-03-27 10:28:18 -07:00

integration

Merge pull request #4603 from tgxworld/group_index_page

2016-12-14 23:26:05 +08:00

integrity

Add locale step

2016-09-22 09:52:19 -04:00

jobs

Remove RSpec given.

2016-12-14 10:29:22 +08:00

mailers

FIX: summary should not include certain post types

2016-12-01 12:01:32 -05:00

models

Add user_updated event to webhooks.

2016-12-13 11:26:26 +08:00

phantom_js

Revert Ember 2.10+ for a short while

2016-12-15 16:43:38 -05:00

serializers

FEATURE: Allow group owners to edit group name and avatar flair.

2016-12-05 14:27:46 +08:00

services

FEATURE: Group logs.

2016-12-12 17:29:54 +08:00

support

Remove RSpec given.

2016-12-14 10:29:22 +08:00

tasks

Add Rake task to clean up unused multisite Redis keys.

2016-12-05 11:46:34 +08:00

views/omniauth_callbacks

FIX: Weird spec

2016-06-10 11:32:32 -04:00

discourse_tagging_spec.rb

FIX: prevent creation of tags with invalid characters

2016-10-12 15:44:36 -04:00

rails_helper.rb

Allow other directories to be specified when accessing fixtures.

2016-08-18 16:34:43 +08:00