Alan Guo Xiang Tan aed65ec16d SECURITY: User's read state for topic is leaked to unauthorized clients. ...

A user's read state for a topic such as the last read post number and the notification level is exposed.

2021-08-12 12:16:45 +08:00

..

components

SECURITY: User's read state for topic is leaked to unauthorized clients.

2021-08-12 12:16:45 +08:00

fabricators

FEATURE: Disallow putting urls in the title for TL-0 users (#13947)

2021-08-05 13:38:39 +04:00

fixtures

FIX: Remove 'reply above line' marker (#13927)

2021-08-03 20:08:19 +03:00

helpers

FIX: Assets for the theme tests page are not compressed (#13736)

2021-07-14 22:52:35 +03:00

import_export

FEATURE: Rake task to export groups (#9450)

2020-04-17 14:59:54 -07:00

initializers

FEATURE: A low priority filter for the review queue. (#12822)

2021-04-23 15:34:24 -03:00

integration

DEV: Isolate multisite specs (#13634)

2021-07-07 18:57:42 +02:00

integrity

DEV: Fix a flaky Onceoff spec (#13314)

2021-06-07 20:38:31 +02:00

jobs

FEATURE: Initial implementation of direct S3 uploads with uppy and stubs (#13787)

2021-07-28 08:42:25 +10:00

lib

FIX: Group inbox new filter not accounting for dismissed topics.

2021-08-05 16:53:12 +08:00

mailers

FEATURE: Use group SMTP job and mailer instead of UserNotifications change (#13489)

2021-06-28 08:55:13 +10:00

models

SECURITY: User's read state for topic is leaked to unauthorized clients.

2021-08-12 12:16:45 +08:00

multisite

FEATURE: Initial implementation of direct S3 uploads with uppy and stubs (#13787)

2021-07-28 08:42:25 +10:00

requests

DEV: Remove unused server-side route. (#14011)

2021-08-11 17:29:19 -03:00

script/import_scripts

DEV: If disabled do not change setting after import (#12142)

2021-02-19 09:33:35 -07:00

serializers

DEV: Remove flaky topic_view_serializer spec (#13845)

2021-07-26 13:17:53 +10:00

services

FIX: remove Nokogumbo references (#13951)

2021-08-05 11:46:25 +10:00

support

FIX: Make sure reset-new for tracked is not limited by per_page count (#13395)

2021-06-17 08:20:09 +10:00

tasks

FIX: remove migrate_from_s3 task that silently corrupts data (#11703)

2021-01-17 22:33:29 +01:00

views/omniauth_callbacks

FEATURE: Use full page redirection for all external auth methods (#8092)

2019-10-08 12:10:43 +01:00

rails_helper.rb

Revert "DEV: Move rate limiter disable to after :each for tests (#13986)" (#13987)

2021-08-10 14:12:36 +10:00

swagger_helper.rb

DEV: Specify the latest openapi spec version (#14012)

2021-08-11 12:38:02 -06:00