Commit Graph

26287 Commits

Author SHA1 Message Date
Sam 3be4982186 clean up drag on iOS handling, we need it bound earlier 2018-04-30 15:58:03 +02:00
Sam 3fee06ae59 improve prev hack 2018-04-30 15:57:58 +02:00
Sam 2e0189afe9 FIX: dragging of timeline was flaky on iOS 2018-04-30 15:57:52 +02:00
Neil Lalonde 3b220d6102 Version bump to v1.9.6 2018-04-24 10:38:53 -04:00
Arpit Jalan 8d1e8fa712 SECURITY: do not show private topic title on /unsubscribed page 2018-04-16 20:05:31 +05:30
Régis Hanol 940b3a7c74 SECURITY: prevent XSS when showing diffs 2018-04-16 15:47:48 +02:00
Arpit Jalan 3edd6622df SECURITY: santize tags when creating new topic via URL 2018-04-16 01:07:47 +05:30
Arpit Jalan 27972c1202 SECURITY: escape HTML entities from topic title 2018-04-16 01:05:56 +05:30
Arpit Jalan 411696b85e SECURITY: do not disclose topic titles on /unsubscribed page to unauthorized users 2018-04-16 01:05:56 +05:30
Neil Lalonde 0bf1c476d7 Version bump to v1.9.5 2018-04-13 10:06:17 -04:00
Guo Xiang Tan 9c2be4dcac FIX: Restorer wasn't rolling back if restore fails.
* This only applies to backup file taken with
  pg_dump 10.3+ and pg_dump 9.5.12+.
2018-04-06 09:45:42 +08:00
Guo Xiang Tan c39167f5da Fix incorrect function name. 2018-04-05 07:22:10 +08:00
Guo Xiang Tan f038903423 Clean up unused function left in the database. 2018-04-05 07:22:03 +08:00
Michael Brown 6307790168 backup restorer: tidy pg_dump schema portability logic, add test 2018-04-04 16:51:25 +08:00
Michael Brown 6691a400da restorer: clarify logging 2018-04-04 16:51:20 +08:00
Guo Xiang Tan e2f6d8b5ca FIX: Restorer was not extracting the patch version in dump file. 2018-04-04 16:51:00 +08:00
Guo Xiang Tan 833314f4b4 Improve grep pattern in restorer. 2018-04-04 16:50:50 +08:00
Guo Xiang Tan 837c0b9a77 Fix version check in restorer. 2018-04-04 16:50:40 +08:00
Guo Xiang Tan 3bccd8c8f3 FIX: Restore process for dump taken with `pg_dump` 10.3+.
* Since we can no longer restore into a different schema,
  we will move tables in the public schema into the backup schema
  first before restoring the dump file which goes into the public
  schema. The downside to this approach is that we will increase
  the downtime experienced during the restore process. Downtime
  would equal the duration of restoring the dump file.
2018-04-04 16:50:27 +08:00
Will Jordan ab1ca72865 single quote password in restore command
> Followup to #3283. Quotes passwords passed to shell for backup restore.
2018-04-04 16:50:08 +08:00
Sam c2ff0f1f3c Update libv8 from 5.9 to 6.3 2018-04-04 16:44:22 +08:00
Neil Lalonde e24d25ce01 Version bump to v1.9.4 2018-03-07 15:16:48 -05:00
Neil Lalonde e23b8e7905 SECURITY: sanitize topic title when staff is viewing a user's past flagged posts and deleted topics 2018-03-02 11:59:36 -05:00
Sam e7f83358aa SECURITY: ensure users have permission when moving categories 2018-03-02 12:13:53 +11:00
Neil Lalonde a745aa4a3e Version bump to v1.9.3 2018-02-15 17:46:48 -05:00
Sam 7174b100f9 SECURITY: correct local onebox category checks 2018-02-14 10:44:06 +11:00
Robin Ward f655936b9d SECURITY: Prevent robots from indexing more routes
These routes could contain sensitive material and should never be
indexed for content.
2018-02-04 13:27:33 -05:00
Neil Lalonde 670450bcfc Version bump to v1.9.2 2018-01-23 16:50:09 -05:00
Gerhard Schlager 0ee2c2363b SECURITY: email domain whitelist could be bypassed 2018-01-17 21:49:43 +01:00
Neil Lalonde b9bc27e539 Version bump to v1.9.1 2018-01-11 15:09:48 -05:00
Arpit Jalan a13b8182e9 FIX: rescue login required / broken images 2018-01-11 14:30:34 -05:00
Arpit Jalan f752c22104 FIX: handle invalid password reset token 2018-01-11 14:30:32 -05:00
Vinoth Kannan 8875993ae1 FIX: URI must be ascii only for URI.parse command 2018-01-11 14:30:29 -05:00
Arpit Jalan 243643bf76 FIX: render error message when backup download fails 2018-01-11 14:30:26 -05:00
Joffrey JAFFEUX 253711c233 FIX: correct shushing_face name 2018-01-11 14:30:22 -05:00
Arpit Jalan bb4eab1267 FIX: do not create duplicate topics
https://meta.discourse.org/t/duplicate-http-https-topics-are-randomly-created/77190
2018-01-11 14:30:19 -05:00
Guo Xiang Tan 7c03b31006 Make rubocop happy. 2018-01-04 09:05:22 +08:00
Neil Lalonde eaf083f9f0 Version bump to v1.9.0 2018-01-03 16:49:31 -05:00
Neil Lalonde f83a39f8ba Merge master 2018-01-03 16:49:06 -05:00
Robin Ward df163cbf61 Add a `deleted-post` class to the deleted post action 2018-01-03 13:56:47 -05:00
Robin Ward dbd2d29abe Allow the deleted post indicator on a post to be extended. 2018-01-03 13:34:26 -05:00
Neil Lalonde e3965b4492 Update translations 2018-01-03 12:21:03 -05:00
Gerhard Schlager ceb7590bcb FIX: bounced email can contain multiple status codes 2018-01-03 17:59:20 +01:00
Arpit Jalan 7ca2e6a80c fix the build 2018-01-03 17:35:36 +05:30
Arpit Jalan 06e509057e FIX: handle missing user records 2018-01-03 17:18:13 +05:30
Guo Xiang Tan ad02437358 FIX: Missing post/topic created web hooks due to race condition. 2018-01-03 17:24:01 +08:00
Guo Xiang Tan 9644569a28 FIX: Wildcard webhooks could send duplicated events. 2018-01-03 17:00:44 +08:00
Joffrey JAFFEUX b295c03001
FIX: select single choice as default when building a poll 2018-01-03 09:23:15 +01:00
Guo Xiang Tan 647cf7545d Fix randomly failing spec. 2018-01-03 14:42:16 +08:00
Guo Xiang Tan af1e2865f7 Re-introduce ability to handle basic authentication in smoke tests. 2018-01-03 14:24:06 +08:00