Guo Xiang Tan
|
1302db2683
|
Skip randomly failing test first.
|
2016-10-01 05:14:35 +08:00 |
Robin Ward
|
f62d01ff1b
|
FIX: Clear the session after a reset token was used
|
2016-09-30 12:20:23 -04:00 |
|
Guo Xiang Tan
|
cde18834f8
|
Fix randomly failing spec.
|
2016-09-30 05:18:54 +08:00 |
|
Guo Xiang Tan
|
72ccb4e11d
|
FIX: Plugin "admin_js" translations bundle was not fetched.
|
2016-09-29 04:42:26 +08:00 |
|
Robin Ward
|
7f66cf618c
|
FIX: You should be an admin to do the wizard
|
2016-09-22 11:12:51 -04:00 |
|
Robin Ward
|
29cf47cfb2
|
Track steps the user has completed, nag them to finish it.
|
2016-09-22 09:52:19 -04:00 |
|
Robin Ward
|
ef84981e38
|
Invite Users step
|
2016-09-22 09:52:19 -04:00 |
|
Robin Ward
|
9f12b571ef
|
Wizard: Server Side Validation + Finished Step
|
2016-09-22 09:52:19 -04:00 |
|
Robin Ward
|
3a4615c205
|
Wizard: Step 1
|
2016-09-22 09:48:58 -04:00 |
|
Robin Ward
|
0471ad393c
|
Scaffold for new Wizard - Rails / Ember / Tests
|
2016-09-22 09:48:58 -04:00 |
|
Robin Ward
|
6070939daa
|
Support for other i18n bundles
|
2016-09-22 09:48:58 -04:00 |
|
Guo Xiang Tan
|
9374e5d42d
|
Revert "FIX: don't overwrite category's logo & background URLs"
This reverts commit 641b95f655.
|
2016-09-22 11:30:19 +08:00 |
Régis Hanol
|
641b95f655
|
FIX: don't overwrite category's logo & background URLs
|
2016-09-21 22:11:31 +02:00 |
|
Robin Ward
|
2766b2edc3
|
FIX: Allow redirection for slugs that start with digits
|
2016-09-19 13:31:19 -04:00 |
Erick Guan
|
c463cf63d4
|
FEATURE: Webhook for user creation and approval
|
2016-09-19 10:12:55 +08:00 |
cpradio
|
0d2d8797b6
|
FIX: Backup validation wasn't escaping hyphens
|
2016-09-16 15:20:42 -04:00 |
|
Guo Xiang Tan
|
a04dadf9b4
|
FIX: Randomly failing specs try 2.
|
2016-09-16 15:10:37 +08:00 |
|
Guo Xiang Tan
|
903d1dd326
|
FIX: Randomly failing specs.
|
2016-09-16 14:56:59 +08:00 |
Sam
|
75f3f7fcbd
|
FEATURE: clean API method for reading a single notification
|
2016-09-16 16:14:15 +10:00 |
|
Guo Xiang Tan
|
512922d776
|
SECURITY: Add filename validation for backup uploads.
|
2016-09-16 11:58:14 +08:00 |
|
Robin Ward
|
2c9a47dda5
|
FIX: Validate the raw content of posts before enqueuing them
|
2016-09-12 12:26:49 -04:00 |
|
Sam
|
2d859ba0ed
|
FIX: user api should always be available to staff
|
2016-09-12 15:42:06 +10:00 |
|
Robin Ward
|
e78b7a243e
|
FIX: Don't enqueue posts if the user can't create them (ex: closed)
|
2016-09-09 12:15:56 -04:00 |
|
Sam
|
1d281e02c7
|
id is optional if already specified in header
|
2016-09-02 17:08:46 +10:00 |
|
Sam
|
be0fd5b4cc
|
FEATURE: allow user api key revocation for read only keys
|
2016-09-02 17:04:00 +10:00 |
|
Erick Guan
|
0217973374
|
FIX: Importing user avatar when new user login by SSO
|
2016-08-29 20:47:19 +08:00 |
Neil Lalonde
|
2251104e32
|
FEATURE: avatar flair can be font awesome icons
|
2016-08-26 17:15:37 -04:00 |
|
Sam
|
ca79c4b276
|
stop eating up push_urls
|
2016-08-26 13:23:06 +10:00 |
|
Sam
|
fcdf13f52d
|
add some more testing
|
2016-08-26 13:18:20 +10:00 |
|
Sam
|
a37db9448f
|
correctly return access rights in auth redirect
|
2016-08-26 13:12:38 +10:00 |
|
Neil Lalonde
|
d079f69b7b
|
FEATURE: add flair to avatars using new settings in the groups admin UI
|
2016-08-17 15:13:15 -04:00 |
|
Sam
|
a25a8115e8
|
FEATURE: support HEAD request to /user-api-key/new
This allows us to cleanly sniff to find if it exists
|
2016-08-17 09:58:19 +10:00 |
|
Sam
|
416e7e0d1e
|
FEATURE: basic UI to view user api keys
|
2016-08-16 17:06:52 +10:00 |
|
Neil Lalonde
|
3b792054f2
|
Merge pull request #4387 from gdpelican/feature/tags-intersection
FEATURE: Tags intersection page
|
2016-08-15 16:24:29 -04:00 |
James Kiesel
|
037e9bb7b8
|
Support any number of tag intersections
|
2016-08-15 15:30:17 -04:00 |
|
Sam
|
fc095acaaa
|
Feature: User API key support (server side implementation)
- Supports throttled read and write
- No support for push yet, but data is captured about intent
|
2016-08-15 17:59:36 +10:00 |
|
James Kiesel
|
7e73b933c7
|
First pass
|
2016-08-12 15:28:46 -04:00 |
|
Sam
|
7e4503dd99
|
FEATURE: basic info route for all sites, even ones that require login
This information is public in meta tags already on home page, providing a
route allows consumers to check it way more cheaply
|
2016-08-12 17:10:35 +10:00 |
|
Sam
|
afaba56de3
|
FEATURE: missing API endpoint for topic tracking states
|
2016-08-12 17:10:35 +10:00 |
|
Robin Ward
|
429f27ec96
|
SECURITY: Avoid mass assignment on user create
|
2016-08-05 11:57:13 -04:00 |
|
Neil Lalonde
|
5f67cd7b45
|
FIX: tag input detects when a tag is not allowed and won't offer to create it anyway
|
2016-08-03 13:18:56 -04:00 |
|
Régis Hanol
|
681f566a66
|
FIX: staff members should be able to see raw email of deleted posts
|
2016-08-01 23:55:22 +02:00 |
|
Neil Lalonde
|
82e170d6a6
|
FIX: 404 when filtering by category, no sub-category, and a tag
|
2016-07-28 16:19:03 -04:00 |
|
Robin Ward
|
2f8ab8cd30
|
SECURITY: XSS in "Account Suspended" Messages and Badge Descriptions
|
2016-07-28 11:38:12 -04:00 |
|
Sam
|
c6dbaca0dc
|
SECURITY: disable user entered badge SQL by default
- Hidden site settings now must be change via rails console
|
2016-07-28 09:03:00 +10:00 |
|
Sam
|
cb3afd11b4
|
SECURITY: limit route access when using external avatars
|
2016-07-28 09:00:43 +10:00 |
Arpit Jalan
|
c626558d36
|
UX: group pages should not show Messages tab to unauthorised users (#4318)
|
2016-07-09 00:50:04 +05:30 |
|
Robin Ward
|
1eb64151f6
|
User interface for watching first post
|
2016-07-07 11:21:50 -04:00 |
|
Robin Ward
|
ccf9b70671
|
When restoring a backup, disable emails.
This prevents accidental sending of emails after a restore before
the admin has had a chance to review everything.
|
2016-06-24 17:15:15 -04:00 |
|
Sam
|
8866169879
|
FEATURE: can invite/revoke groups on private messages
|
2016-06-20 16:29:27 +10:00 |