Martin Brennan e8a842ab8c FIX: Stop category logo + background being marked secure (#10513) ...

Meta topic: https://meta.discourse.org/t/secure-media-uploads-breaks-category-logos/161693

Category backgrounds and logos are public uploads and should not be marked as secure.

I also discovered that a lot of the UploadSecurity specs for public types were returning false positives; this has been fixed.

2020-08-24 17:12:28 +10:00

..

backup_restore

FIX: Backups should use relative paths for local uploads

2020-08-21 15:22:28 +02:00

compression

DEV: Split max decompressed setting for themes and backups (#8179)

2019-10-11 14:38:10 -03:00

content_security_policy

FIX: Allow CSP to work correctly for non-default hostnames/schemes (#9180)

2020-03-19 19:54:42 +00:00

i18n

FIX: Using the default_locale in locale fallbacks caused problems

2020-05-06 22:59:07 +02:00

imap/providers

FEATURE: IMAP delete email sync for group inboxes (#10392)

2020-08-12 10:16:26 +10:00

seed_data

DEV: Add rubocop-rspec (#9288)

2020-03-27 17:35:40 +01:00

site_settings

FIX: Error message when setting enforce 2fa with social logins (#10479)

2020-08-19 13:16:31 -05:00

validators

FEATURE: Add timezone to core user_options (#8380)

2019-11-25 10:49:27 +10:00

webauthn

SECURITY: 2FA with U2F / TOTP

2020-01-15 11:27:12 +01:00

bookmark_manager_spec.rb

FEATURE: Add "delete on owner reply" bookmark functionality (#10231)

2020-07-21 10:00:39 +10:00

bookmark_query_spec.rb

FIX: Bookmark search fixes (#10239)

2020-07-17 15:55:07 +10:00

bookmark_reminder_notification_handler_spec.rb

FIX: Ensure topic user bookmarked synced on bookmark auto-delete (#10323)

2020-07-29 09:43:32 +10:00

browser_detection_spec.rb

FIX: Detect DiscourseHub user agent.

2019-08-09 11:58:15 +03:00

content_security_policy_spec.rb

DEV: Remove blob: workers from CSP (#10440)

2020-08-14 18:15:30 +01:00

db_helper_spec.rb

FEATURE: Include optimized thumbnails for topics (#9215)

2020-05-05 09:07:50 +01:00

discourse_js_processor_spec.rb

Support for transpiling .js files (#9160)

2020-03-11 09:43:55 -04:00

encodings_spec.rb

DEV: use #frozen_string_literal: true on all spec

2019-04-30 10:27:42 +10:00

introduction_updater_spec.rb

FIX: replace default welcome topic post with new value from wizard

2020-04-01 15:42:45 -04:00

mini_sql_multisite_connection_spec.rb

DEV: Allow DB.after_commit to be used outside of a transaction

2020-05-04 09:42:41 +01:00

search_spec.rb

PERF: Avoid parsing Post#cooked with Nokogiri for every search.

2020-07-24 10:43:09 +08:00

shrink_uploaded_image_spec.rb

FIX: Improvements and fixes to the image downsizing script (#9950)

2020-06-11 14:47:59 +02:00

theme_flag_modifier_spec.rb

FEATURE: Allow themes to specify modifiers in their about.json file (#9097)

2020-03-11 13:30:45 +00:00

theme_javascript_compiler_spec.rb

DEV: Remove Discourse.RAW_TEMPLATES (#9630)

2020-05-05 12:15:03 -04:00

topic_upload_security_manager_spec.rb

DEV: Add rubocop-rspec (#9288)

2020-03-27 17:35:40 +01:00

upload_creator_spec.rb

Convert HEIC uploads to JPG by default (#10395)

2020-08-07 11:17:50 -04:00

upload_recovery_spec.rb

DEV: disable all upload recovery specs

2019-11-11 16:04:18 +11:00

upload_security_spec.rb

FIX: Stop category logo + background being marked secure (#10513)

2020-08-24 17:12:28 +10:00