ba5b035f6e
FEATURE: Increase pbkdf2 iterations to 600k ( #20981 )
...
Existing passwords will continue to work. Hashes will be regenerates on a user's next login.
2023-04-11 11:56:20 +01:00
a29b133d33
DEV: Update security policy ( #16144 )
...
Add note regarding low quality reports being received via email.
2022-03-09 10:02:20 +08:00
5f7e60d9dc
discourse/discourse change from 'master' to 'main'
2021-07-19 11:46:15 -04:00
59097b207f
DEV: Correct typos and spelling mistakes ( #12812 )
...
Over the years we accrued many spelling mistakes in the code base.
This PR attempts to fix spelling mistakes and typos in all areas of the code that are extremely safe to change
- comments
- test descriptions
- other low risk areas
2021-05-21 11:43:47 +10:00
8517b6f386
DOCS: we use xss.js and not Google Caja ( #12866 )
...
The text is out of date as we migrated to xss.js quite some time ago.
2021-04-28 15:02:55 +05:30
e0d9232259
FIX: use allowlist and blocklist terminology ( #10209 )
...
This is a PR of the renaming whitelist to allowlist and blacklist to the blocklist.
2020-07-27 10:23:54 +10:00
db39eae683
make security commits search order by date
2019-07-25 00:08:03 -07:00
24b3494660
HTTPSify links ( #7046 )
2019-02-22 16:29:27 +01:00
bd6d482d11
Update SECURITY.md
2018-12-19 16:55:54 -08:00
358fbeba14
add CSP info for Discourse 2.2
2018-12-19 16:54:45 -08:00
02f582eca0
add recent security commits info
2018-09-11 12:43:52 -07:00
ea1f4a0021
add Hacker One page to security.md
2017-01-06 23:51:12 -08:00
20ba6e4b19
add ddos section, install guide references
2014-05-09 16:36:39 -07:00
03e51b1a3a
Update install guide link
2014-04-25 20:22:36 +05:30
a6b4b5dbf2
Replace Clockwork with Sidetiq
2013-08-14 21:39:40 +02:00
028cd348e1
more security doc copyedits
2013-07-30 14:08:15 -07:00
4c8a3370da
copyedits
2013-07-30 14:00:37 -07:00
d688ef1b49
move security reporting up to the top
2013-07-30 13:59:30 -07:00
c3f3c1a23f
cross-links and copyedits
2013-07-30 13:57:15 -07:00
0e494c7303
Update SECURITY.md
2013-07-29 16:42:49 +10:00
3186535537
initial draft of security document
2013-07-29 16:26:49 +10:00
David Taylor
Joshua Rosenfeld
Michael Brown
Josh Soref
Rishabh
Krzysztof Kotlarek
Jeff Atwood
sau226
Arpit Jalan
Stephan Kaag
Sam