discourse/app
Natalie Tay d5745d34c2
SECURITY: Limit the character count of group membership requests (#19993)
When creating a group membership request, there is no character
limit on the 'reason' field. This can be potentially be used by
an attacker to create enormous amount of data in the database.

Co-authored-by: Ted Johansson <ted@discourse.org>
2023-01-25 13:50:33 +02:00
..
assets SECURITY: Limit the character count of group membership requests (#19993) 2023-01-25 13:50:33 +02:00
controllers SECURITY: Limit the length of drafts (#19989) 2023-01-25 13:50:21 +02:00
helpers DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
jobs DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
mailers DEV: Apply syntax_tree formatting to app/* 2023-01-09 14:14:59 +00:00
models SECURITY: Limit the character count of group membership requests (#19993) 2023-01-25 13:50:33 +02:00
serializers DEV: Prefer \A and \z over ^ and $ in regexes (#19936) 2023-01-20 12:52:49 -06:00
services FIX: Do not add empty use/svg tags in ExcerptParser (#19969) 2023-01-24 14:40:24 +10:00
views FEATURE: Show more context in Discourse topic oneboxes 2023-01-11 14:22:53 +01:00